Lucene search

[email protected]CVE-2020-8584

HistoryJan 08, 2021 - 4:15 p.m.

CVE-2020-8584

2021-01-0816:15:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2020-8584

element os

vulnerability

code execution

remote attacker

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.3 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.006 Low

EPSS

Percentile

78.5%

JSON

Element OS versions prior to 1.8P1 and 12.2 are susceptible to a vulnerability that could allow an unauthenticated remote attacker to perform arbitrary code execution.

CPENameOperatorVersion
netapp:solidfirenetapp solidfireeq-
netapp:hci_management_nodenetapp hci management nodeeq-
netapp:hci_storage_nodenetapp hci storage nodeeq-
netapp:element_osnetapp element oseq1.8
netapp:element_osnetapp element osle12.2

CPE	Name	Operator	Version
netapp:solidfire	netapp solidfire	eq	-
netapp:hci_management_node	netapp hci management node	eq	-
netapp:hci_storage_node	netapp hci storage node	eq	-
netapp:element_os	netapp element os	eq	1.8
netapp:element_os	netapp element os	le	12.2

References

security.netapp.com/advisory/ntap-20210108-0008/

Social References

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.3 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.006 Low

EPSS

Percentile

78.5%

JSON

Related for CVE-2020-8584

cvelist1 prion1