Netapp All Flash Fabric-Attached Storage 8300 Firmware vulnerabilities

2 CVEs affecting Netapp All Flash Fabric-Attached Storage 8300 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-45485, published 2021-12-25.

More from Netapp.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-45485, published 2021-12-25. High severity, CVSS 7.5. EPSS: 3.6% chance of exploitation in the next 30 days. In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that…
• CVE-2020-11868, published 2020-04-17. High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days. ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronization via a server mode packet with a spoofed source IP address, because…