VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 26, 2020· Updated Aug 5, 2024

CVE-2019-17274

CVE-2019-17274

Description

NetApp FAS 8300/8700 and AFF A400 Baseboard Management Controller (BMC) firmware versions 13.x prior to 13.1P1 were shipped with a default account enabled that could allow unauthorized arbitrary command execution via local access.

Affected products

4
  • NetApp/FAS 8300llm-create
    Range: >=13.0 <13.1P1
  • NetApp/FAS 8700llm-create
    Range: >=13.0 <13.1P1
  • NetApp/AFF A400llm-create
    Range: >=13.0 <13.1P1
  • NetApp/NetApp FAS 8300/8700 and AFF A400 Baseboard Management Controllerv5
    Range: 13.x prior to 13.1P1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.