Netapp Virtual Storage Console For VMware Vsphere vulnerabilities

4 CVEs affecting Netapp Virtual Storage Console For VMware Vsphere, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-3900, published 2019-04-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-3900, published 2019-04-25. High severity, CVSS 7.7. EPSS: 4.3% chance of exploitation in the next 30 days. An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while handling incoming packets in handle_rx(). It could occur if one end sends packets…
CVE-2016-5711, published 2017-02-07. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. NetApp Virtual Storage Console for VMware vSphere before 6.2.1 uses a non-unique certificate, which allows remote attackers to conduct man-in-the-middle attacks via unspecified vectors.
CVE-2019-3882, published 2019-04-24. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw was found in the Linux kernel's vfio interface implementation that permits violation of the user's locked memory limit. If a device is bound to a vfio driver, such as vfio-pci, and the local…
CVE-2019-3901, published 2019-04-22. Medium severity, CVSS 4.7. EPSS: 0.3% chance of exploitation in the next 30 days. A race condition in perf_event_open() allows local attackers to leak sensitive data from setuid programs. As no relevant locks (in particular the cred_guard_mutex) are held during the…