Netapp a700s Firmware vulnerabilities

32 CVEs affecting Netapp a700s Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-6387, published 2024-07-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-6387, published 2024-07-01. High severity, CVSS 8.1. EPSS: 99.5% chance of exploitation in the next 30 days. A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote…
CVE-2022-1292, published 2022-05-03. High severity, CVSS 7.3. EPSS: 82.6% chance of exploitation in the next 30 days. The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed.…
CVE-2020-15778, published 2020-07-24. High severity, CVSS 7.4. EPSS: 13.7% chance of exploitation in the next 30 days. scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that…
CVE-2019-5108, published 2019-12-23. Medium severity, CVSS 6.5. EPSS: 10.1% chance of exploitation in the next 30 days. An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could exploit this vulnerability by triggering AP to send IAPP location updates for…
CVE-2019-10126, published 2019-06-14. Critical severity, CVSS 9.8. EPSS: 6.8% chance of exploitation in the next 30 days. A flaw was found in the Linux kernel. A heap based buffer overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c might lead to memory corruption and possibly…
CVE-2020-8835, published 2020-04-02. High severity, CVSS 7.8. EPSS: 6% chance of exploitation in the next 30 days. In the Linux kernel 5.5.0 and newer, the bpf verifier (kernel/bpf/verifier.c) did not properly restrict the register bounds for 32-bit operations, leading to out-of-bounds reads and writes in kernel…
CVE-2019-3846, published 2019-06-03. High severity, CVSS 8.8. EPSS: 5.9% chance of exploitation in the next 30 days. A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network.
CVE-2020-13143, published 2020-05-18. Medium severity, CVSS 6.5. EPSS: 5.2% chance of exploitation in the next 30 days. gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel 3.16 through 5.6.13 relies on kstrdup without considering the possibility of an internal '\0' value, which allows…
CVE-2022-1473, published 2022-05-03. High severity, CVSS 7.5. EPSS: 4.6% chance of exploitation in the next 30 days. The OPENSSL_LH_flush() function, which empties a hash table, contains a bug that breaks reuse of the memory occuppied by the removed hash table entries. This function is used when decoding…
CVE-2019-18282, published 2020-01-16. Medium severity, CVSS 5.3. EPSS: 2.6% chance of exploitation in the next 30 days. The flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CID-55667441c84f. This occurs because the auto flowlabel of a UDP IPv6 packet…

Latest

CVE-2024-26733, published 2024-04-03. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. In the Linux kernel, the following vulnerability has been resolved: arp: Prevent overflow in arp_req_get(). syzkaller reported an overflown write in arp_req_get(). [0] When ioctl(SIOCGARP) is…
CVE-2023-1077, published 2023-03-27. High severity, CVSS 7.0. EPSS: 0.3% chance of exploitation in the next 30 days. In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but list_head.The buggy error condition…
CVE-2022-36879, published 2022-07-27. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice.
CVE-2022-1434, published 2022-05-03. Medium severity, CVSS 5.9. EPSS: 1.2% chance of exploitation in the next 30 days. The OpenSSL 3.0 implementation of the RC4-MD5 ciphersuite incorrectly uses the AAD data as the MAC key. This makes the MAC key trivially predictable. An attacker could exploit this issue by…
CVE-2022-1343, published 2022-05-03. Medium severity, CVSS 5.3. EPSS: 2.1% chance of exploitation in the next 30 days. The function `OCSP_basic_verify` verifies the signer certificate on an OCSP response. In the case where the (non-default) flag OCSP_NOCHECKS is used then the response will be positive (meaning a…
CVE-2021-4203, published 2022-03-25. Medium severity, CVSS 6.8. EPSS: 1.7% chance of exploitation in the next 30 days. A use-after-free read flaw was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (and connect()) in the Linux kernel. In this flaw, an attacker…
CVE-2020-35508, published 2021-03-26. Medium severity, CVSS 4.5. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child/parent process identification handling while filtering signal handlers. A local…