CVE-2019-5490

Опубликовано: 21 мар. 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Низкий

Описание

Certain versions between 2.x to 5.x (refer to advisory) of the NetApp Service Processor firmware were shipped with a default account enabled that could allow unauthorized arbitrary command execution. Any platform listed in the advisory Impact section may be affected and should be upgraded to a fixed version of Service Processor firmware IMMEDIATELY.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:netapp:service_processor:2.8:-:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:3.7:-:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:4.5:-:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:5.5:-:*:*:*:*:*:*

cpe:2.3:o:netapp:clustered_data_ontap:9.5:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

Одно из

cpe:2.3:a:netapp:service_processor:2.8:-:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:3.7:-:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:4.5:-:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:5.5:-:*:*:*:*:*:*

cpe:2.3:o:netapp:clustered_data_ontap:9.4:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

Одно из

cpe:2.3:a:netapp:service_processor:2.8:-:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:3.7:-:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:4.5:-:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:5.5:-:*:*:*:*:*:*

cpe:2.3:o:netapp:clustered_data_ontap:9.3:*:*:*:*:*:*:*

Конфигурация 4

Одновременно

Одно из

cpe:2.3:a:netapp:service_processor:2.5:-:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:3.4:-:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:3.4:patch1:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:3.4:patch2:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:4.2:-:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:4.2:patch1:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:4.2:patch2:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:5.2:-:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:5.2:patch1:*:*:*:*:*:*

cpe:2.3:o:netapp:clustered_data_ontap:9.2:*:*:*:*:*:*:*

Конфигурация 5

Одновременно

Одно из

cpe:2.3:a:netapp:service_processor:2.4.1:-:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:2.4.1:patch1:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:3.3:-:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:3.3:patch1:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:3.3:patch2:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:3.3:patch3:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:3.3:patch4:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:4.1:-:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:4.1:patch1:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:4.1:patch2:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:4.1:patch3:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:4.1:patch4:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:4.1:patch5:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:4.1:patch6:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:5.1:-:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:5.1:patch1:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:5.1:patch2:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:5.1:patch3:*:*:*:*:*:*

cpe:2.3:o:netapp:clustered_data_ontap:9.1:*:*:*:*:*:*:*

Конфигурация 6

Одновременно

Одно из

cpe:2.3:a:netapp:service_processor:2.4:-:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:3.2:-:*:*:*:*:*:*

cpe:2.3:o:netapp:clustered_data_ontap:9.0:*:*:*:*:*:*:*

Конфигурация 7

Одновременно

Одно из

cpe:2.3:a:netapp:service_processor:2.3.2:-:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:2.3.2:patch1:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:2.3.2:patch2:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:2.3.2:patch3:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:3.1.2:-:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:3.1.2:patch1:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:3.1.2:patch2:*:*:*:*:*:*

cpe:2.3:o:netapp:clustered_data_ontap:8.3:*:*:*:*:*:*:*

Конфигурация 8

Одновременно

Одно из

cpe:2.3:a:netapp:service_processor:2.2.5:-:*:*:*:*:*:*

cpe:2.3:a:netapp:service_processor:3.0.4:-:*:*:*:*:*:*

cpe:2.3:o:netapp:clustered_data_ontap:8.2:*:*:*:*:*:*:*

EPSS

Процентиль: 78%

0.01103

Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-1188

Связанные уязвимости

GHSA-jjg8-x9mh-qvmm

github

больше 3 лет назад

EPSS

Процентиль: 78%

0.01103

Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-1188