PT-2019-17714 · Netapp · Netapp Aff A700S Baseboard Management Controller (Bmc) Firmware

Publicado 2019-07-01 · Atualizado 2020-08-24 · CVE-2019-5497

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NetApp AFF A700s Baseboard Management Controller (BMC) firmware versions 1.22 and higher

Description The issue concerns a default account enabled in the firmware that could allow unauthorized arbitrary command execution.

Recommendations For NetApp AFF A700s Baseboard Management Controller (BMC) firmware versions 1.22 and higher, disable the default account to prevent unauthorized access.

Correção

Enumeração de Fraquezas

CWE-1188

Identificadores relacionados

CVE-2019-5497

Produtos afetados

Netapp Aff A700S Baseboard Management Controller (Bmc) Firmware

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-5497 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-5497 · Aviso do Fabricante
• https://t.me/malwr/1623 · Publicação no Telegram
• https://security.netapp.com/advisory/ntap-20190627-0001 · Aviso do Fabricante