PT-2021-17230 · Netapp · Clustered Data Ontap

Published 2021-11-01 · Updated 2022-07-12 · CVE-2021-27005

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Clustered Data ONTAP versions 9.6 through 9.6P15 Clustered Data ONTAP versions 9.7 through 9.7P15 Clustered Data ONTAP versions 9.8 through 9.8P6 Clustered Data ONTAP versions 9.9 through 9.9.1P2

Description: The issue allows a remote attacker to cause a crash of the httpd server.

Recommendations: For Clustered Data ONTAP versions 9.6 through 9.6P15, update to version 9.6P16 or later. For Clustered Data ONTAP versions 9.7 through 9.7P15, update to version 9.7P16 or later. For Clustered Data ONTAP versions 9.8 through 9.8P6, update to version 9.8P7 or later. For Clustered Data ONTAP versions 9.9 through 9.9.1P2, update to version 9.9.1P3 or later.

Fix

Related Identifiers

CVE-2021-27005

Affected Products

Clustered Data Ontap

References · 4

• https://osv.dev/vulnerability/CVE-2021-27005 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-27005 · Security Note
• https://security.netapp.com/advisory/NTAP-20211029-0002 · Vendor Advisory
• https://t.me/cibsecurity/31555 · Telegram Post