Netapp Hci h610s Firmware vulnerabilities

3 CVEs affecting Netapp Hci h610s Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-0725, published 2025-02-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-2961, published 2024-04-17. High severity, CVSS 7.3. EPSS: 88.3% chance of exploitation in the next 30 days. The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may…
CVE-2025-0725, published 2025-02-05. High severity, CVSS 7.3. EPSS: 1.8% chance of exploitation in the next 30 days. When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, **using zlib 1.2.0.3 or older**, an attacker-controlled…
CVE-2020-8573, published 2020-06-29. Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days. The NetApp HCI H610C, H615C and H610S Baseboard Management Controllers (BMC) are shipped with a documented default account and password that should be changed during the initial node setup. During…