CVE-2019-17274 - NetApp FAS 8300/8700 and AFF A400 Baseboard Management Controller (BMC) firmware versions 13.x prior to 13.1P1 were shipped with a default account enabled that could allow unauthorized arbitrary command execution via local access

Back Back to CVE browser

HIGH

NetApp FAS 8300/8700 and AFF A400 Baseboard Management Controller (BMC) firmware versions 13.x prior to 13.1P1 were shipped with a default account enabled that could allow unauthorized arbitrary command execution via local access

Published Feb 26, 2020

7.8

HIGH

CVSS 3.1

EPSS 0.58%

Description

NetApp FAS 8300/8700 and AFF A400 Baseboard Management Controller (BMC) firmware versions 13.x prior to 13.1P1 were shipped with a default account enabled that could allow unauthorized arbitrary command execution via local access.

Affected products

Vendor NetApp Product NetApp FAS 8300/8700 and AFF A400 Baseboard Management Controller Default
n/a
- Version
  13.x prior to 13.1P1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

NetApp

NetApp FAS 8300/8700 and AFF A400 Baseboard Management Controller

n/a

Version	Status	Constraints
13.x prior to 13.1P1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-1188

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-7687
Advisory
https://security.netapp.com/advisory/ntap-20200226-0001/
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-7687		Advisory
https://security.netapp.com/advisory/ntap-20200226-0001/		x_refsource_CONFIRMVendor Advisory