CVE-2021-27594: 
SAP 3D Visual Enterprise Viewer vulnerability analysis and mitigation

When a user opens manipulated Windows Bitmap (.BMP) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application (NVD).

The vulnerability has been assigned a CVSS v3.1 Base Score of 3.3 LOW (Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) by NVD, while SAP SE assessed it with a Base Score of 4.3 MEDIUM (Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L). The vulnerability affects SAP 3D Visual Enterprise Viewer version 9 (NVD).

The vulnerability affects the availability of the application, causing it to crash and become temporarily unavailable until the application is restarted. There is no impact on confidentiality or integrity of the system (NVD).

The vulnerability requires user interaction to exploit, as the user must open a maliciously crafted BMP file from an untrusted source. The attack complexity is considered low, and no privileges are required to execute the attack (NVD).

SAP has released security patches to address this vulnerability. Users should refer to SAP Security Note 3035472 for detailed mitigation instructions (SAP Note).