NetApp Products Multiple Vulnerabilities

Release Date: 6 Jun 2022 5534 Views

RISK: Medium Risk

TYPE: Servers - Other Servers

Multiple vulnerabilities were identified in NetApp Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, sensitive information disclosure and data manipulation on the targeted system.

Impact

Denial of Service
Information Disclosure
Data Manipulation

System / Technologies affected

AFF Baseboard Management Controller (BMC) - A700s
Active IQ Unified Manager for VMware vSphere
Clustered Data ONTAP
Clustered Data ONTAP Antivirus Connector
FAS/AFF Baseboard Management Controller (BMC) - 8300/8700/A400
FAS/AFF Baseboard Management Controller (BMC) - A250/500f
NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H300E/H500E/H700E/H410S
NetApp HCI Baseboard Management Controller (BMC) - H410C
NetApp HCI Compute Node (Bootstrap OS)
NetApp SANtricity SMI-S Provider
NetApp SMI-S Provider
NetApp SolidFire & HCI Management Node
NetApp SolidFire, Enterprise SDS & HCI Storage Node (Element Software)
SnapManager for Hyper-V

Solutions

Please refer to the vendor web-site for update on patches release.
- Software fixes will be made available through the NetApp Support website in the Software Download section.
  https://mysupport.netapp.com/site/downloads/

Vulnerability Identifier

Source

NetApp