Netapp Fas Baseboard Management Controller vulnerabilities

2 CVEs affecting Netapp Fas Baseboard Management Controller, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-26708, published 2021-02-05.

More from Netapp.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-15473, published 2018-08-17. Medium severity, CVSS 5.3. EPSS: 98.6% chance of exploitation in the next 30 days. OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed,…
• CVE-2021-26708, published 2021-02-05. High severity, CVSS 7.0. EPSS: 1.6% chance of exploitation in the next 30 days. A local privilege escalation was discovered in the Linux kernel before 5.10.13. Multiple race conditions in the AF_VSOCK implementation are caused by wrong locking in net/vmw_vsock/af_vsock.c. The…