NetApp SANtricity OS Controller Software Vulnerabilities - Lenovo Support NL

**Lenovo Security Advisory:**LEN-50102

**Potential Impact:**Information disclosure, denial of service

**Severity:**High

**Scope of Impact:**Industry-wide

**CVE Identifier:**CVE-2020-8577, CVE-2020-8580

Summary Description:

NetApp reported potential security vulnerabilities in NetApp SANtricity OS Controller Software that may lead to information disclosure or denial of service.

Mitigation Strategy for Customers (what you should do to protect yourself):

NetApp recommends updating to the appropriate NetApp SANtricity OS Controller Software version 11.60.3R1 or 11.70R1 or higher.