Netapp Converged Systems Advisor Agent vulnerabilities

4 CVEs affecting Netapp Converged Systems Advisor Agent, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-36958, published 2024-05-30.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-10160, published 2019-06-07. Critical severity, CVSS 9.8. EPSS: 5.2% chance of exploitation in the next 30 days. A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 affecting versions 2.7, 3.5, 3.6, 3.7 and from v3.8.0a4 through v3.8.0b1, which…
CVE-2023-0361, published 2023-02-15. High severity, CVSS 7.4. EPSS: 1.5% chance of exploitation in the next 30 days. A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to recover the key encrypted in the RSA ciphertext across a…
CVE-2022-48566, published 2023-08-22. Medium severity, CVSS 5.9. EPSS: 1.3% chance of exploitation in the next 30 days. An issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time-defeating optimisations were possible in the accumulator variable in hmac.compare_digest.
CVE-2024-36958, published 2024-05-30. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix nfsd4_encode_fattr4() crasher Ensure that args.acl is initialized early. It is used in an unconditional call to kfree()…