Netapp Solidfire Element OS vulnerabilities

3 CVEs affecting Netapp Solidfire Element OS, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-28531, published 2023-03-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-18065, published 2018-10-08. Medium severity, CVSS 6.5. EPSS: 17.5% chance of exploitation in the next 30 days. _set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted…
CVE-2018-18066, published 2018-10-08. High severity, CVSS 7.5. EPSS: 3.6% chance of exploitation in the next 30 days. snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to crash via a crafted…
CVE-2023-28531, published 2023-03-17. Critical severity, CVSS 9.8. EPSS: 3% chance of exploitation in the next 30 days. ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. The earliest affected version is 8.9.