CVE-2020-8573

Name of the Vulnerable Software and Affected Versions NetApp HCI H610C, H615C, and H610S Baseboard Management Controllers (BMC) versions prior to the version where the default password reset issue is fixed

Description The issue concerns a default account and password in the NetApp HCI H610C, H615C, and H610S Baseboard Management Controllers (BMC) that gets reset during upgrades to certain versions, potentially allowing remote attackers to cause a Denial of Service (DoS).

Recommendations For NetApp HCI H610C, H615C, and H610S Baseboard Management Controllers (BMC), change the default account password during the initial node setup and after any upgrades to prevent the use of default credentials. As a temporary workaround, consider restricting remote access to the BMC until the default password can be changed to a unique value.