NetApp Service Processor Remote Code Execution Vulnerability

Last Update Date: 11 Mar 2019 09:57 Release Date: 11 Mar 2019 4450 Views

RISK: Medium Risk

TYPE: Servers - Other Servers

A vulnerability was identified in NetApp Service Processor, a remote attacker can exploit this vulnerability to trigger remote code execution on the targeted system.

Impact

Remote Code Execution

System / Technologies affected

Clustered Data ONTAP
Data ONTAP operating in 7-Mode
Service Processor

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

The vendor has issued a fix
https://security.netapp.com/advisory/ntap-20190305-0001/

Vulnerability Identifier

CVE-2019-5490

Source

SecurityWizardry