PT-2019-17714 · Netapp · Netapp Aff A700S Baseboard Management Controller (Bmc) Firmware

Published 2019-07-01 · Updated 2020-08-24 · CVE-2019-5497

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NetApp AFF A700s Baseboard Management Controller (BMC) firmware versions 1.22 and higher

Description The issue concerns a default account enabled in the firmware that could allow unauthorized arbitrary command execution.

Recommendations For NetApp AFF A700s Baseboard Management Controller (BMC) firmware versions 1.22 and higher, disable the default account to prevent unauthorized access.

Fix

Weakness Enumeration

CWE-1188

Related Identifiers

CVE-2019-5497

Affected Products

Netapp Aff A700S Baseboard Management Controller (Bmc) Firmware

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-5497 · Security Note
• https://osv.dev/vulnerability/CVE-2019-5497 · Vendor Advisory
• https://security.netapp.com/advisory/ntap-20190627-0001 · Vendor Advisory
• https://t.me/malwr/1623 · Telegram Post