CVE-2017-12421

NetApp Clustered Data ONTAP 8.3.x before 8.3.2P12 allows remote authenticated users to execute arbitrary code on the storage controller via unspecified vectors...

CVE-2016-1895

NetApp Data ONTAP (clusters running before 8.2.5 or 8.3.x before 8.3.2P12) is affected by CVE-2016-1895. An authenticated remote attacker can cause a denial of service through unsafe handling of certain user input strings in the OS. The vulnerability’s root cause is related to input string proces...

CVE-2017-12421

NetApp Clustered Data ONTAP 8.3.x before 8.3.2P12 is affected by CVE-2017-12421. A remote authenticated attacker can execute arbitrary code on the storage controller via unspecified vectors. Impact is described as remote code execution with potential data exposure on affected ONTAP versions. Reme...

CVE-2017-14053

NetApp OnCommand Unified Manager for Clustered Data ONTAP before 7.2P1 does not set the secure flag for an unspecified cookie in an HTTPS session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an HTTP session...

CVE-2017-12423

NetApp Clustered Data ONTAP 8.x before 8.3.2P12 is affected by an information-disclosure issue in Storage Virtual Machines (SVMs). Remote authenticated users can read data from other SVMs via unspecified vectors. Impact and root cause are described as unspecified flaws in SVMs. The Nessus entry n...

Authentication flaw

NetApp Data ONTAP before 8.2.4, when operating in 7-Mode, allows remote attackers to bypass authentication and 1 obtain sensitive information from or 2 modify volumes via vectors related to UTF-8 in the volume language...

CVE-2015-7746

NetApp Data ONTAP before 8.2.4, when operating in 7-Mode, allows remote attackers to bypass authentication and 1 obtain sensitive information from or 2 modify volumes via vectors related to UTF-8 in the volume language...

CVE-2015-7746

NetApp Data ONTAP operating in 7-Mode is affected in versions before 8.2.4. A remote attacker can bypass authentication and either obtain sensitive information from volumes or modify volumes via vectors related to UTF-8 in the volume language. This vulnerability is documented across multiple sour...

CVE-2015-7746

NetApp Data ONTAP before 8.2.4, when operating in 7-Mode, allows remote attackers to bypass authentication and 1 obtain sensitive information from or 2 modify volumes via vectors related to UTF-8 in the volume language...

PT-2017-7983

Name of the Vulnerable Software and Affected Versions NetApp Data ONTAP versions prior to 8.2.5 NetApp Data ONTAP versions 8.3.x prior to 8.3.2P12 Description The issue allows remote authenticated users to cause a denial of service. This is related to unsafe user input string handling...

PT-2017-12549

Name of the Vulnerable Software and Affected Versions NetApp Clustered Data ONTAP versions 8.3.x through 8.3.2P11 Description The issue allows remote authenticated users to read data on other Storage Virtual Machines SVMs via unspecified vectors. Recommendations For versions 8.3.x through 8.3.2P1...

PT-2017-12547

Name of the Vulnerable Software and Affected Versions NetApp Clustered Data ONTAP versions 8.3.x before 8.3.2P12 Description The issue allows remote authenticated users to execute arbitrary code on the storage controller. Recommendations For versions 8.3.x before 8.3.2P12, update to version...

CVE-2017-12423: Undefined Security Weakness

NetApp Clustered Data ONTAP 8.3.x before 8.3.2P12 allows remote authenticated users to read data on other Storage Virtual Machines SVMs via unspecified vectors...

CVE-2016-1895: Use of Externally-Controlled Format String

NetApp Data ONTAP before 8.2.5 and 8.3.x before 8.3.2P12 allow remote authenticated users to cause a denial of service via vectors related to unsafe user input string handling...

PT-2017-7267

Name of the Vulnerable Software and Affected Versions NetApp Data ONTAP versions prior to 8.2.4 Description The issue allows remote attackers to bypass authentication. This can lead to obtaining sensitive information from or modifying volumes. The bypass is related to UTF-8 in the volume language...

CVE-2017-14053: Exposure of Sensitive Information to an Unauthorized Actor

NetApp OnCommand Unified Manager for Clustered Data ONTAP before 7.2P1 does not set the secure flag for an unspecified cookie in an HTTPS session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an HTTP session...

CVE-2017-12421: Undefined Security Weakness

NetApp Clustered Data ONTAP 8.3.x before 8.3.2P12 allows remote authenticated users to execute arbitrary code on the storage controller via unspecified vectors...

NetApp ONTAP Device Detection

Binary data netappontapdetect.nbin...

NetApp ONTAP 8.x.x < 8.2.5 (NTAP-20170815-0002)

The version of NetApp ONTAP running on the remote host is 8.x.x prior to 8.2.5. It is, therefore, affected by a denial-of-service vulnerability. A remote unauthenticated attacker could leverage this vulnerability and cause a denial-of-service condition against affected systems running 7-Mode in N...

NetApp Clustered Data ONTAP Heap Buffer Overflow Vulnerability

NetApp Clustered Data ONTAP is a set of storage operating system for clustered mode from the American company NetApp. A heap buffer overflow vulnerability exists in the NetApp Clustered Data ONTAP SMB implementation, which allows remote attackers to exploit the vulnerability by submitting a speci...