CVE-2021-27608

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-04-14 · updated 2026-06-17
Weakness: CWE-428

Description

An unquoted service path in SAPSetup, version - 9.0, could lead to privilege escalation during the installation process that is performed when an executable file is registered. This could further lead to complete compromise of confidentiality, Integrity and Availability.

Affected products

SAP Setup: 9.0

References

https://launchpad.support.sap.com/#/notes/3039649
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649
https://launchpad.support.sap.com/#/notes/3039649
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649

Get alerted when CVE-2021-27608 or the next vulnerability affects your stack