PT-2017-12547 · Netapp · Netapp Clustered Data Ontap

Published 2017-09-01 · Updated 2019-10-03 · CVE-2017-12421

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NetApp Clustered Data ONTAP versions 8.3.x before 8.3.2P12

Description The issue allows remote authenticated users to execute arbitrary code on the storage controller.

Recommendations For versions 8.3.x before 8.3.2P12, update to version 8.3.2P12 or later to resolve the issue.

Fix

Related Identifiers

CVE-2017-12421

Affected Products

Netapp Clustered Data Ontap

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-12421 · Security Note
• https://osv.dev/vulnerability/CVE-2017-12421 · Vendor Advisory
• https://kb.netapp.com/support/s/article/NTAP-20170831-0002 · Vendor Advisory