EUVD-2020-29428

Malware in sbrugna...

EUVD-2021-13768

Malware in sbrugna...

EUVD-2020-29425

Malware in sbrugna...

CVE-2021-26996

E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploited could allow a remote attacker to discover system configuration and application information which may aid in crafting more complex attacks...

CVE-2022-23237

E-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attacks that could allow an attacker to redirect users to malicious websites...

CVE-2022-23236

E-Series SANtricity OS Controller Software versions 11.40 through 11.70.2 store the LDAP BIND password in plaintext within a file accessible only to privileged users...

Netapp E-Series SANtricity OS Controller Software 安全漏洞

Netapp E-Series SANtricity OS Controller Software is a disk array OS controller software from Netapp Inc. in the United States. A security vulnerability exists in Netapp E-Series SANtricity OS Controller Software versions 11.40 through 11.70.2. An attacker could exploit the vulnerability by stori...

CVE-2022-23237

CVE-2022-23237 affects NetApp E-Series SANtricity OS Controller Software, versions 11.x up to 11.70.2. The root cause is a host header injection vulnerability in the software that could allow an attacker to redirect users to malicious websites. Impact is described as partial confidentiality/integ...

CVE-2022-23236

CVE-2022-23236 affects NetApp E-Series SANtricity OS Controller Software versions 11.40–11.70.2. The vulnerability arises from storing the LDAP BIND password in plaintext in a file accessible to privileged users, creating a confidentiality risk for LDAP credentials. The available documents do not...

CVE-2022-23237: URL Redirection to Untrusted Site

E-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attacks that could allow an attacker to redirect users to malicious websites...

PT-2022-15914

Name of the Vulnerable Software and Affected Versions E-Series SANtricity OS Controller Software versions 11.x through 11.70.2 Description The issue allows an attacker to perform host header injection attacks, potentially redirecting users to malicious websites. Recommendations For versions 11.x...

CVE-2022-23236: Cleartext Storage of Sensitive Information

E-Series SANtricity OS Controller Software versions 11.40 through 11.70.2 store the LDAP BIND password in plaintext within a file accessible only to privileged users...

PT-2022-15913

Name of the Vulnerable Software and Affected Versions E-Series SANtricity OS Controller Software versions 11.40 through 11.70.2 Description The issue concerns the storage of the LDAP BIND password in plaintext within a file that is accessible only to privileged users. Recommendations For E-Series...

Code injection

E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploited could allow a remote attacker to discover information via error messaging which may aid in crafting more complex attacks...

CVE-2021-26997: Generation of Error Message Containing Sensitive Information

E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploited could allow a remote attacker to discover information via error messaging which may aid in crafting more complex attacks...

PT-2021-17221

Name of the Vulnerable Software and Affected Versions: E-Series SANtricity OS Controller Software versions prior to 11.70.1 Description: The issue allows privileged attackers to execute arbitrary code when successfully exploited. Recommendations: For versions prior to 11.70.1, update to version...

CVE-2021-26993: Undefined Security Weakness

E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploited could allow a remote attacker to cause a partial Denial of Service DoS to the web server...

CVE-2021-26995: Undefined Security Weakness

E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploited could allow privileged attackers to execute arbitrary code...

CVE-2021-26996: Undefined Security Weakness

E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploited could allow a remote attacker to discover system configuration and application information which may aid in crafting more complex attacks...

CVE-2020-8580

SANtricity OS Controller Software versions 11.30 and higher are susceptible to a vulnerability which allows an unauthenticated attacker with access to the system to cause a Denial of Service DoS...