Netapp Hci h615c Firmware vulnerabilities

2 CVEs affecting Netapp Hci h615c Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-0725, published 2025-02-05.

More from Netapp.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-2961, published 2024-04-17. High severity, CVSS 7.3. EPSS: 88.3% chance of exploitation in the next 30 days. The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may…
• CVE-2025-0725, published 2025-02-05. High severity, CVSS 7.3. EPSS: 1.8% chance of exploitation in the next 30 days. When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, **using zlib 1.2.0.3 or older**, an attacker-controlled…