EUVD-2020-29425

Malware in sbrugna...

Netapp E-Series SANtricity OS Controller Software 安全漏洞

Netapp E-Series SANtricity OS Controller Software is a disk array OS controller software from Netapp Inc. in the United States. A security vulnerability exists in Netapp E-Series SANtricity OS Controller Software versions 11.40 through 11.70.2. An attacker could exploit the vulnerability by stori...

CVE-2022-23237

CVE-2022-23237 affects NetApp E-Series SANtricity OS Controller Software, versions 11.x up to 11.70.2. The root cause is a host header injection vulnerability in the software that could allow an attacker to redirect users to malicious websites. Impact is described as partial confidentiality/integ...

CVE-2022-23237: URL Redirection to Untrusted Site

E-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attacks that could allow an attacker to redirect users to malicious websites...

PT-2022-15914

Name of the Vulnerable Software and Affected Versions E-Series SANtricity OS Controller Software versions 11.x through 11.70.2 Description The issue allows an attacker to perform host header injection attacks, potentially redirecting users to malicious websites. Recommendations For versions 11.x...

PT-2021-17221

Name of the Vulnerable Software and Affected Versions: E-Series SANtricity OS Controller Software versions prior to 11.70.1 Description: The issue allows privileged attackers to execute arbitrary code when successfully exploited. Recommendations: For versions prior to 11.70.1, update to version...

CVE-2021-26995: Undefined Security Weakness

E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploited could allow privileged attackers to execute arbitrary code...

CVE-2021-26996: Undefined Security Weakness

E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploited could allow a remote attacker to discover system configuration and application information which may aid in crafting more complex attacks...

CVE-2021-26997: Generation of Error Message Containing Sensitive Information

E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploited could allow a remote attacker to discover information via error messaging which may aid in crafting more complex attacks...

CVE-2021-26993: Undefined Security Weakness

E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploited could allow a remote attacker to cause a partial Denial of Service DoS to the web server...

PT-2020-20220

Name of the Vulnerable Software and Affected Versions SANtricity OS Controller Software versions 11.50.1 and higher Description The issue allows an attacker to discover sensitive information by intercepting its transmission within an https session. Recommendations For SANtricity OS Controller...

CVE-2020-8577: Undefined Security Weakness

SANtricity OS Controller Software versions 11.50.1 and higher are susceptible to a vulnerability which could allow an attacker to discover sensitive information by intercepting its transmission within an https session...

PT-2020-20222

Name of the Vulnerable Software and Affected Versions SANtricity OS Controller Software versions 11.30 and higher Description The issue allows an unauthenticated attacker with access to the system to cause a Denial of Service DoS. Recommendations For SANtricity OS Controller Software versions 11....

CVE-2020-8580: Undefined Security Weakness

SANtricity OS Controller Software versions 11.30 and higher are susceptible to a vulnerability which allows an unauthenticated attacker with access to the system to cause a Denial of Service DoS...

PT-2020-9887

Name of the Vulnerable Software and Affected Versions E-Series SANtricity OS Controller Software version 11.60.0 Description The issue allows an attacker to cause a Denial of Service DoS in IPv6 environments. Recommendations For E-Series SANtricity OS Controller Software version 11.60.0, at the...

CVE-2019-17273: Undefined Security Weakness

E-Series SANtricity OS Controller Software version 11.60.0 is susceptible to a vulnerability which allows an attacker to cause a Denial of Service DoS in IPv6 environments...

PT-2018-16991

Name of the Vulnerable Software and Affected Versions NetApp E-Series SANtricity OS Controller Software versions 11.30 through 11.30.5 Description The issue concerns unauthenticated remote code execution. Recommendations For versions 11.30 through 11.30.5, update to a version that contains a fix...

CVE-2018-5492: Improper Input Validation

NetApp E-Series SANtricity OS Controller Software 11.30 and later version 11.30.5 is susceptible to unauthenticated remote code execution...