CVE-2016-6667

Опубликовано: 07 фев. 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

NetApp OnCommand Unified Manager for Clustered Data ONTAP 6.3 through 6.4P1 contain a default privileged account, which allows remote attackers to execute arbitrary code via unspecified vectors.

Ссылки

https://kb.netapp.com/support/s/article/NTAP-20161017-0002
Patch
Vendor Advisory
https://kb.netapp.com/support/s/article/NTAP-20161017-0002
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:netapp:oncommand_unified_manager_for_clustered_data_ontap:6.3:*:*:*:*:*:*:*

cpe:2.3:a:netapp:oncommand_unified_manager_for_clustered_data_ontap:6.4:*:*:*:*:*:*:*

cpe:2.3:a:netapp:oncommand_unified_manager_for_clustered_data_ontap:6.4:p1:*:*:*:*:*:*

EPSS

Процентиль: 85%

0.02471

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-3xcc-hjh3-q7jx