Lucene search

[email protected]CVE-2019-5500

HistoryMay 11, 2020 - 6:15 p.m.

CVE-2019-5500

2020-05-1118:15:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2019-5500

netapp

service processor

baseboard management controller

firmware

vulnerability

dos

nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.6 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

58.6%

JSON

Certain versions of the NetApp Service Processor and Baseboard Management Controller firmware allow a remote unauthenticated attacker to cause a Denial of Service (DoS).

CPENameOperatorVersion
netapp:fas26x0_firmwarenetapp fas26x0 firmwareeq-
netapp:fas27x0_firmwarenetapp fas27x0 firmwareeq-
netapp:fas8200_firmwarenetapp fas8200 firmwareeq-
netapp:aff_c190_firmwarenetapp aff c190 firmwareeq-
netapp:aff_a200_firmwarenetapp aff a200 firmwareeq-
netapp:aff_a220_firmwarenetapp aff a220 firmwareeq-
netapp:aff_a300_firmwarenetapp aff a300 firmwareeq-

CPE	Name	Operator	Version
netapp:fas26x0_firmware	netapp fas26x0 firmware	eq	-
netapp:fas27x0_firmware	netapp fas27x0 firmware	eq	-
netapp:fas8200_firmware	netapp fas8200 firmware	eq	-
netapp:aff_c190_firmware	netapp aff c190 firmware	eq	-
netapp:aff_a200_firmware	netapp aff a200 firmware	eq	-
netapp:aff_a220_firmware	netapp aff a220 firmware	eq	-
netapp:aff_a300_firmware	netapp aff a300 firmware	eq	-

References

security.netapp.com/advisory/ntap-20190802-0003/

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.6 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

58.6%

JSON

Related for CVE-2019-5500

cvelist1 prion1