CVE-2020-8584: Netapp Element OS

Critical severity, CVSS 9.8. EPSS: 4.4% chance of exploitation in the next 30 days.

Element OS versions prior to 1.8P1 and 12.2 are susceptible to a vulnerability that could allow an unauthenticated remote attacker to perform arbitrary code execution.

Affected products

• Netapp Element OS: before 1.8 (fixed in 1.8); from 12.0, up to and including 12.2; version 1.8 only
• Netapp Hci Management Node: affected versions not specified
• Netapp Hci Storage Node: affected versions not specified
• Netapp Solidfire: affected versions not specified

Published 2021-01-08. Last modified 2026-06-17.