CVE-2016-6667: Netapp Oncommand Unified Manager For Clustered Data Ontap

Critical severity, CVSS 9.8. EPSS: 3% chance of exploitation in the next 30 days.

NetApp OnCommand Unified Manager for Clustered Data ONTAP 6.3 through 6.4P1 contain a default privileged account, which allows remote attackers to execute arbitrary code via unspecified vectors.

Affected products

• Netapp Oncommand Unified Manager For Clustered Data Ontap: version 6.3 only; version 6.4 only

Published 2017-02-07. Last modified 2026-06-17.