{"id":"CVE-2024-33008","aliases":["EUVD-2024-30753","GHSA-qfqw-rh34-r78m"],"status":"published","title":"Memory Corruption vulnerability in SAP Replication Server","description":"SAP Replication Server allows an attacker to use gateway for executing some commands to RSSD. This could result in crashing the Replication Server due to memory corruption with high impact on Availability of the system.","severity":{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00538,"percentile":0.45786,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-787"],"published":"2024-05-14T03:46:17Z","modified":"2026-06-17T07:30:52Z","products":[{"vendor":"sap_se","product":"sap replication server"}],"references":[{"url":"https://me.sap.com/notes/3349468","tags":["x_transferred"]},{"url":"https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-33008"},{"url":"https://github.com/advisories/GHSA-qfqw-rh34-r78m"}],"sources":{"cve":[{"id":"CVE-2024-33008","title":"Memory Corruption vulnerability in SAP Replication Server","description":"SAP Replication Server allows an attacker to use gateway for executing some commands to RSSD. This could result in crashing the Replication Server due to memory corruption with high impact on Availability of the system.","status":"published","published":"2024-05-14T03:46:17.394Z","modified":"2024-09-26T18:28:15.789Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:34:21.404483Z"}],"euvd":[{"id":"EUVD-2024-30753","description":"SAP Replication Server allows an attacker to use gateway for executing some commands to RSSD. This could result in crashing the Replication Server due to memory corruption with high impact on Availability of the system.","status":"published","published":"2024-05-14T03:46:17Z","modified":"2024-09-26T18:28:15Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T00:28:08.0832Z"}],"ghsa":[{"id":"GHSA-qfqw-rh34-r78m","title":"\nSAP Replication Server allows an attacker to use gateway for executing some commands to RSSD....","description":"\nSAP Replication Server allows an attacker to use gateway for executing some commands to RSSD. This could result in crashing the Replication Server due to memory corruption with high impact on Availability of the system.","status":"published","published":"2024-05-14T18:31:00Z","modified":"2024-09-26T21:32:16Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:58:21.32771Z"}],"nvd":[{"id":"CVE-2024-33008","description":"SAP Replication Server allows an attacker to use gateway for executing some commands to RSSD. This could result in crashing the Replication Server due to memory corruption with high impact on Availability of the system.","status":"published","published":"2024-05-14T16:17:15.003Z","modified":"2026-06-17T07:30:52.143Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:09:58.124007Z"}]}}