NetApp 產品多個漏洞

影響

• 阻斷服務
• 資料洩露
• 篡改

受影響之系統或技術

• Active IQ Unified Manager for Linux
• Active IQ Unified Manager for Microsoft Windows
• Active IQ Unified Manager for VMware vSphere
• Element Plug-in for vCenter Server
• Management Services for Element Software and NetApp HCI
• NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S
• NetApp HCI Baseboard Management Controller (BMC) - H410C
• NetApp HCI Compute Node (Bootstrap OS)
• NetApp Manageability SDK
• NetApp SolidFire & HCI Management Node
• NetApp SolidFire, Enterprise SDS & HCI Storage Node (Element Software)
• OnCommand Insight
• ONTAP Select Deploy administration utility
• SnapCenter

解決方案

• 有關修補程式的更新，請瀏覽供應商之網站。
  • 軟件修補程式將通過 NetApp 網站的 “下載中心” 提供。
    https://mysupport.netapp.com/site/downloads/

漏洞識別碼

• CVE-2018-1285
• CVE-2019-17498
• CVE-2022-1651
• CVE-2022-2047
• CVE-2022-2048
• CVE-2022-25647
• CVE-2022-31160

資料來源

• NetApp

相關連結

• https://security.netapp.com/advisory/ntap-20220901-0006/
• https://security.netapp.com/advisory/ntap-20220901-0008/
• https://security.netapp.com/advisory/ntap-20220901-0009/
• https://security.netapp.com/advisory/ntap-20220909-0001/
• https://security.netapp.com/advisory/ntap-20220909-0004/
• https://security.netapp.com/advisory/ntap-20220909-0007/