Lucene search

K
cve[email protected]CVE-2023-27314
HistoryOct 12, 2023 - 7:15 p.m.

CVE-2023-27314

2023-10-1219:15:11
CWE-400
web.nvd.nist.gov
32
cve-2023-27314
ontap
vulnerability
remote attacker
http service
nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.1%

ONTAP 9 versions prior to 9.8P19, 9.9.1P16, 9.10.1P12, 9.11.1P8,
9.12.1P2 and 9.13.1 are susceptible to a vulnerability which could allow
a remote unauthenticated attacker to cause a crash of the HTTP service.

Affected configurations

NVD
Node
netappclustered_data_ontapRange9.09.8
OR
netappclustered_data_ontapMatch9.8-
OR
netappclustered_data_ontapMatch9.8p7
OR
netappclustered_data_ontapMatch9.9.1-
OR
netappclustered_data_ontapMatch9.9.1p3
OR
netappclustered_data_ontapMatch9.10.0-
OR
netappclustered_data_ontapMatch9.10.1-
OR
netappclustered_data_ontapMatch9.12.0-
OR
netappclustered_data_ontapMatch9.13.0-

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "ONTAP 9",
    "vendor": "NetApp",
    "versions": [
      {
        "lessThan": "9.8P19, 9.9.1P16, 9.10.1P12, 9.11.1P8, 9.12.1P2, 9.13.1",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.1%

Related for CVE-2023-27314