CVE-2019-5490

2019-03-2118:25:53

netapp

www.cve.org

9.6 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.9%

JSON

Certain versions between 2.x to 5.x (refer to advisory) of the NetApp Service Processor firmware were shipped with a default account enabled that could allow unauthorized arbitrary command execution. Any platform listed in the advisory Impact section may be affected and should be upgraded to a fixed version of Service Processor firmware IMMEDIATELY.

CNA Affected

[
  {
    "product": "NetApp Service Processor",
    "vendor": "NetApp, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "2.x-5.x - refer to advisory"
      }
    ]
  }
]