CVE-2019-5490

🗓️ 21 Mar 2019 19:29:00Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 13 Views

NetApp Service Processor firmware has default account for arbitrary command execution, affected versions 2.x to 5.

Reporter	Title	Published	Views	Family All 7
CVE	CVE-2019-5490	21 Mar 201918:25	–	cve
Cvelist	CVE-2019-5490	21 Mar 201918:25	–	cvelist
EUVD	EUVD-2019-15065	7 Oct 202500:30	–	euvd
Lenovo	Default Privileged Account Vulnerability in the NetApp Service Processor - Lenovo Support US	17 Apr 201914:11	–	lenovo
Lenovo	Default Privileged Account Vulnerability in the NetApp Service Processor - US	17 Apr 201914:11	–	lenovo
OSV	CVE-2019-5490	21 Mar 201919:29	–	osv
Prion	Command injection	21 Mar 201919:29	–	prion

NVD

Node

netapp service_processorMatch2.8-

OR

netapp service_processorMatch3.7-

OR

netapp service_processorMatch4.5-

OR

netapp service_processorMatch5.5-

AND

netapp clustered_data_ontapMatch9.5

Node

netapp service_processorMatch2.8-

OR

netapp service_processorMatch3.7-

OR

netapp service_processorMatch4.5-

OR

netapp service_processorMatch5.5-

AND

netapp clustered_data_ontapMatch9.4

Node

netapp service_processorMatch2.8-

OR

netapp service_processorMatch3.7-

OR

netapp service_processorMatch4.5-

OR

netapp service_processorMatch5.5-

AND

netapp clustered_data_ontapMatch9.3

Node

netapp service_processorMatch2.5-

OR

netapp service_processorMatch3.4-

OR

netapp service_processorMatch3.4patch1

OR

netapp service_processorMatch3.4patch2

OR

netapp service_processorMatch4.2-

OR

netapp service_processorMatch4.2patch1

OR

netapp service_processorMatch4.2patch2

OR

netapp service_processorMatch5.2-

OR

netapp service_processorMatch5.2patch1

AND

netapp clustered_data_ontapMatch9.2

Node

netapp service_processorMatch2.4.1-

OR

netapp service_processorMatch2.4.1patch1

OR

netapp service_processorMatch3.3-

OR

netapp service_processorMatch3.3patch1

OR

netapp service_processorMatch3.3patch2

OR

netapp service_processorMatch3.3patch3

OR

netapp service_processorMatch3.3patch4

OR

netapp service_processorMatch4.1-

OR

netapp service_processorMatch4.1patch1

OR

netapp service_processorMatch4.1patch2

OR

netapp service_processorMatch4.1patch3

OR

netapp service_processorMatch4.1patch4

OR

netapp service_processorMatch4.1patch5

OR

netapp service_processorMatch4.1patch6

OR

netapp service_processorMatch5.1-

OR

netapp service_processorMatch5.1patch1

OR

netapp service_processorMatch5.1patch2

OR

netapp service_processorMatch5.1patch3

AND

netapp clustered_data_ontapMatch9.1

Node

netapp service_processorMatch2.4-

OR

netapp service_processorMatch3.2-

AND

netapp clustered_data_ontapMatch9.0

Node

netapp service_processorMatch2.3.2-

OR

netapp service_processorMatch2.3.2patch1

OR

netapp service_processorMatch2.3.2patch2

OR

netapp service_processorMatch2.3.2patch3

OR

netapp service_processorMatch3.1.2-

OR

netapp service_processorMatch3.1.2patch1

OR

netapp service_processorMatch3.1.2patch2

AND

netapp clustered_data_ontapMatch8.3

Node

netapp service_processorMatch2.2.5-

OR

netapp service_processorMatch3.0.4-

AND

netapp clustered_data_ontapMatch8.2

Source	Link
support	www.support.lenovo.com/us/en/solutions/LEN-26771
security	www.security.netapp.com/advisory/ntap-20190305-0001/

21 Nov 2024 04:45Current

9.6High risk

Vulners AI Score9.6

CVSS 39.8

CVSS 210

EPSS0.01103

netapp service processor firmware default account arbitrary command execution upgrade