CVE-2023-27498: 
Sap Host Agent vulnerability analysis and mitigation

SAP Host Agent (SAPOSCOL) version 7.22 contains a vulnerability that allows an unauthenticated attacker with network access to a server port assigned to the SAP Start Service to submit crafted requests resulting in memory corruption. This vulnerability was assigned CVE-2023-27498 and was disclosed on March 14, 2023. The vulnerability affects SAP Host Agent version 7.22 (NVD).

The vulnerability is classified as a stack-based buffer overflow (CWE-121). It has been assigned a CVSS v3.1 base score of 7.2 (HIGH) with the following vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L. The attack vector is network-accessible, requires low attack complexity, needs no privileges or user interaction, and has a changed scope (NVD).

The vulnerability can be exploited to reveal technical information about the server but cannot be used to modify data. Additionally, it can make a particular service temporarily unavailable, affecting system availability (NVD).

SAP has released security notes and patches to address this vulnerability. Users should refer to SAP Security Note 3275727 for detailed mitigation instructions (SAP Note).