PT-2021-17215 · Netapp · Clustered Data Ontap

Published 2021-03-04 · Updated 2021-03-17 · CVE-2021-26989

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Clustered Data ONTAP versions prior to 9.3P21 Clustered Data ONTAP versions prior to 9.5P16 Clustered Data ONTAP versions prior to 9.6P12 Clustered Data ONTAP versions prior to 9.7P9 Clustered Data ONTAP versions prior to 9.8

Description: The issue allows a remote authenticated attacker to cause a Denial of Service (DoS) on clustered Data ONTAP configured for SMB access.

Recommendations: For versions prior to 9.3P21, update to version 9.3P21 or later. For versions prior to 9.5P16, update to version 9.5P16 or later. For versions prior to 9.6P12, update to version 9.6P12 or later. For versions prior to 9.7P9, update to version 9.7P9 or later. For versions prior to 9.8, update to version 9.8 or later.

Fix

Related Identifiers

CVE-2021-26989

Affected Products

Clustered Data Ontap

References · 4

• https://security.netapp.com/advisory/NTAP-20210303-0002 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-26989 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-26989 · Security Note
• https://t.me/cibsecurity/24489 · Telegram Post