Netapp Fas a400 Firmware vulnerabilities

3 CVEs affecting Netapp Fas a400 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-36879, published 2022-07-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-2068, published 2022-06-21. High severity, CVSS 7.3. EPSS: 96.4% chance of exploitation in the next 30 days. In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command…
CVE-2019-19448, published 2019-12-08. High severity, CVSS 7.8. EPSS: 2.1% chance of exploitation in the next 30 days. In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space…
CVE-2022-36879, published 2022-07-27. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice.