Certain versions between 2.x to 5.x (refer to advisory) of the NetApp Service Processor firmware were shipped with a default account enabled that could allow unauthorized arbitrary command execution. Any platform listed in the advisory Impact section may be affected and should be upgraded to a fixed version of Service Processor firmware IMMEDIATELY.
2019-03-21T19:29:00.580
2024-11-21T04:45:02.493
Modified
CVSSv3.0: 9.8 (CRITICAL)
AV:N/AC:L/Au:N/C:C/I:C/A:C
10.0
10.0
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | netapp | service_processor | 2.8 | Yes |
| Application | netapp | service_processor | 3.7 | Yes |
| Application | netapp | service_processor | 4.5 | Yes |
| Application | netapp | service_processor | 5.5 | Yes |
| Operating System | netapp | clustered_data_ontap | 9.5 | No |
| Application | netapp | service_processor | 2.8 | Yes |
| Application | netapp | service_processor | 3.7 | Yes |
| Application | netapp | service_processor | 4.5 | Yes |
| Application | netapp | service_processor | 5.5 | Yes |
| Operating System | netapp | clustered_data_ontap | 9.4 | No |
| Application | netapp | service_processor | 2.8 | Yes |
| Application | netapp | service_processor | 3.7 | Yes |
| Application | netapp | service_processor | 4.5 | Yes |
| Application | netapp | service_processor | 5.5 | Yes |
| Operating System | netapp | clustered_data_ontap | 9.3 | No |
| Application | netapp | service_processor | 2.5 | Yes |
| Application | netapp | service_processor | 3.4 | Yes |
| Application | netapp | service_processor | 3.4 | Yes |
| Application | netapp | service_processor | 3.4 | Yes |
| Application | netapp | service_processor | 4.2 | Yes |
| Application | netapp | service_processor | 4.2 | Yes |
| Application | netapp | service_processor | 4.2 | Yes |
| Application | netapp | service_processor | 5.2 | Yes |
| Application | netapp | service_processor | 5.2 | Yes |
| Operating System | netapp | clustered_data_ontap | 9.2 | No |
| Application | netapp | service_processor | 2.4.1 | Yes |
| Application | netapp | service_processor | 2.4.1 | Yes |
| Application | netapp | service_processor | 3.3 | Yes |
| Application | netapp | service_processor | 3.3 | Yes |
| Application | netapp | service_processor | 3.3 | Yes |
| Application | netapp | service_processor | 3.3 | Yes |
| Application | netapp | service_processor | 3.3 | Yes |
| Application | netapp | service_processor | 4.1 | Yes |
| Application | netapp | service_processor | 4.1 | Yes |
| Application | netapp | service_processor | 4.1 | Yes |
| Application | netapp | service_processor | 4.1 | Yes |
| Application | netapp | service_processor | 4.1 | Yes |
| Application | netapp | service_processor | 4.1 | Yes |
| Application | netapp | service_processor | 4.1 | Yes |
| Application | netapp | service_processor | 5.1 | Yes |
| Application | netapp | service_processor | 5.1 | Yes |
| Application | netapp | service_processor | 5.1 | Yes |
| Application | netapp | service_processor | 5.1 | Yes |
| Operating System | netapp | clustered_data_ontap | 9.1 | No |
| Application | netapp | service_processor | 2.4 | Yes |
| Application | netapp | service_processor | 3.2 | Yes |
| Operating System | netapp | clustered_data_ontap | 9.0 | No |
| Application | netapp | service_processor | 2.3.2 | Yes |
| Application | netapp | service_processor | 2.3.2 | Yes |
| Application | netapp | service_processor | 2.3.2 | Yes |
| Application | netapp | service_processor | 2.3.2 | Yes |
| Application | netapp | service_processor | 3.1.2 | Yes |
| Application | netapp | service_processor | 3.1.2 | Yes |
| Application | netapp | service_processor | 3.1.2 | Yes |
| Operating System | netapp | clustered_data_ontap | 8.3 | No |
| Application | netapp | service_processor | 2.2.5 | Yes |
| Application | netapp | service_processor | 3.0.4 | Yes |
| Operating System | netapp | clustered_data_ontap | 8.2 | No |