Code injection

2023-10-1219:15:00

PRIOn knowledge base

www.prio-n.com

ontap

code injection

nvd

remote attacker

http service

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.1%

JSON

ONTAP 9 versions prior to 9.8P19, 9.9.1P16, 9.10.1P12, 9.11.1P8,
9.12.1P2 and 9.13.1 are susceptible to a vulnerability which could allow
a remote unauthenticated attacker to cause a crash of the HTTP service.

CPENameOperatorVersion
clustered_data_ontapeq9.9.1 p3
clustered_data_ontapeq9.8 p7
clustered_data_ontapeq9.8
clustered_data_ontapeq9.9.1
clustered_data_ontapeq9.10.0
clustered_data_ontapeq9.10.1
clustered_data_ontapeq9.12.0
clustered_data_ontapeq9.13.0
clustered_data_ontapge9.0
clustered_data_ontaplt9.8

Name	Operator	Version
clustered_data_ontap	eq	9.9.1 p3
clustered_data_ontap	eq	9.8 p7
clustered_data_ontap	eq	9.8
clustered_data_ontap	eq	9.9.1
clustered_data_ontap	eq	9.10.0
clustered_data_ontap	eq	9.10.1
clustered_data_ontap	eq	9.12.0
clustered_data_ontap	eq	9.13.0
clustered_data_ontap	ge	9.0
clustered_data_ontap	lt	9.8

References

security.netapp.com/advisory/ntap-20231009-0001/