Critical severity9.8NVD Advisory· Published Jul 1, 2019· Updated Jun 17, 2026

CVE-2019-5497

Description

NetApp AFF A700s Baseboard Management Controller (BMC) firmware versions 1.22 and higher were shipped with a default account enabled that could allow unauthorized arbitrary command execution.

Affected products

NetApp/Aff A700s Firmware
cpe:2.3:o:netapp:aff_a700s_firmware:*:*:*:*:*:*:*:*
Range: >=1.22
NetApp/Clustered Data Ontap
cpe:2.3:o:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*
NetApp/AFF A700s Baseboard Management Controller (BMC)llm-fuzzy
Range: >=1.22
NetApp/Solidfire Baseboard Management Controller Firmwarecpe-rescue
Range: 1.22 and higher

Patches

Vulnerability mechanics

References

security.netapp.com/advisory/ntap-20190627-0001/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000