CVE-2017-16690 - CVE House
Back to Database
Status published High CVE-2017-16690

A malicious DLL preload attack possible on NwSapSetup and Installation...

Vulnerability Description

A malicious DLL preload attack possible on NwSapSetup and Installation self-extracting program for SAP Plant Connectivity 2.3 and 15.0. It is possible that SAPSetup / NwSapSetup.exe loads system DLLs like DWMAPI.dll (located in your Syswow64 / System32 folder) from the folder the executable is in and not from the system location. The desired behavior is that system dlls are only loaded from the system folders. If a dll with the same name as the system dll is located in the same folder as the executable, this dll is loaded and code is executed.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-16690

Credits & Attribution

No credits recorded in the NVD database.

References

More from SAP

View All →
CVE-2023-29189
HTTP Verb Tampering vulnerability in SAP CRM (WebClient UI)
Medium 5.4
CVE-2023-29187
DLL Hijacking vulnerability in SapSetup (Software Installation Program)
Medium 6.7
CVE-2023-29186
Directory/Path Traversal vulnerability in SAP NetWeaver.
High 8.7
CVE-2023-29185
Denial of Service (DOS) in SAP NetWeaver AS for ABAP (Business Server Pages)
Medium 5.3
CVE-2023-29112
Code Injection vulnerability in SAP Application Interface Framework (Message Monitoring)
Low 3.7

Affected Vendor

Affected Software

SAP Plant Connectivity
Vulnerable Versions:
2.3; 15.0

Timeline

Official Publish: December 12th, 2017
Last Modified: September 16th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.