SAP Approuter in the SAP Business AI Platform does not properly handle certain requests under specific conditions, leading to resource allocation without limits or throttling (CWE-770). An unauthenticated attacker can exploit this by sending specially crafted input that causes the component to crash and restart, impacting service availability. The vulnerability has a CVSS 3.1 base score of 5.9 (medium severity) with no impact on confidentiality or integrity. Exploitation complexity is high due to required runtime conditions. No known exploits are reported in the wild. No patch or remediation level has been disclosed by the vendor as of the publication date.

Successful exploitation results in denial of service by crashing and restarting the Approuter component, causing high availability impact. There is no impact on confidentiality or integrity of the system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or mitigation level is provided, monitor vendor communications for updates. Due to the complexity of exploitation and lack of known exploits, immediate urgent action may not be required but awareness and readiness to apply patches when available is advised.