Netapp FAS9500 Firmware vulnerabilities

3 CVEs affecting Netapp FAS9500 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-26641, published 2024-03-18.

More from Netapp.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-23583, published 2023-11-14. High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days. Sequence of processor instructions leads to unexpected behavior for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege and/or information…
• CVE-2024-26641, published 2024-03-18. Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days. In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() syzbot found __ip6_tnl_rcv() could access unitiliazed data…
• CVE-2021-33060, published 2022-08-18. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Out-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access.