CVE-2024-33001: 
SAP NetWeaver Application Server ABAP vulnerability analysis and mitigation

A Denial of Service vulnerability (CVE-2024-33001) has been identified in SAP NetWeaver and ABAP platform. The vulnerability was disclosed on June 10, 2024, and allows attackers to impede performance for legitimate users by crashing or flooding the service (NVD, CERT-FR). The affected systems include SAP NetWeaver Application Server ABAP and ABAP Platform versions SAP_BASIS 740-758, 795, 796, and ST-PI versions 2008_1_700, 2008_1_710, and 740.

The vulnerability has been assigned a CVSS v3.1 base score of 6.5 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. The weakness has been categorized under CWE-400 (Uncontrolled Resource Consumption) by SAP SE (NVD).

The exploitation of this vulnerability can result in long response delays and service interruptions, significantly degrading the service quality experienced by legitimate users. This causes a high impact on the availability of the application (NVD).

SAP has released security patches to address this vulnerability. Users are advised to refer to SAP Security Note 3453170 for detailed mitigation instructions (SAP Security Notes).