VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Dec 15, 2023· Updated Jun 17, 2026

CVE-2023-27317

CVE-2023-27317

Description

ONTAP 9 versions 9.12.1P8, 9.13.1P4, and 9.13.1P5 are susceptible to a vulnerability which will cause all SAS-attached FIPS 140-2 drives to become unlocked after a system reboot or power cycle or a single SAS-attached FIPS 140-2 drive to become unlocked after reinsertion. This could lead to disclosure of sensitive information to an attacker with physical access to the unlocked drives.

Affected products

5
  • NetApp/ONTAPllm-fuzzy5 versions
    9.12.1P8, 9.13.1P4, 9.13.1P5+ 4 more
    • (no CPE)range: 9.12.1P8, 9.13.1P4, 9.13.1P5
    • (no CPE)range: 9.12.1P8
    • cpe:2.3:a:netapp:ontap:9.12.1:p8:*:*:*:*:*:*
    • cpe:2.3:a:netapp:ontap:9.13.1:p4:*:*:*:*:*:*
    • cpe:2.3:a:netapp:ontap:9.13.1:p5:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.