CVE-2023-27317: Netapp Ontap

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

ONTAP 9 versions 9.12.1P8, 9.13.1P4, and 9.13.1P5 are susceptible to a vulnerability which will cause all SAS-attached FIPS 140-2 drives to become unlocked after a system reboot or power cycle or a single SAS-attached FIPS 140-2 drive to become unlocked after reinsertion. This could lead to disclosure of sensitive information to an attacker with physical access to the unlocked drives.

Affected products

• Netapp Ontap: version 9.12.1 only; version 9.13.1 only

Published 2023-12-15. Last modified 2026-06-17.