Security Bulletin: SMB vulnerabilities in IBM N Series Products

Summary Data ONTAP products implement the SMB protocol. Systems that implement the SMB protocol can be susceptible to one or more man-in-the-middle attacks which when exploited could potentially lead to information disclosure, privilege escalation, or a Denial of Service. Vulnerability Details...

CVE-2016-3997

NetApp Clustered Data ONTAP allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service by leveraging failure to enable SMB signing enforcement in its default state...

CVE-2016-3997

NetApp CVE-2016-3997 affects Clustered Data ONTAP (N series) where SMB signing is not enforced by default, enabling MITM attacks that can disclose data, escalate privileges, or cause DoS. Root cause: SMB implementation fails to require signing by default. Impact: information disclosure, privilege...