PT-2019-17714

CVE-2019-5497

·

Published

2019-07-01

·

Updated

2020-08-24

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions NetApp AFF A700s Baseboard Management Controller (BMC) firmware versions 1.22 and higher
Description The issue concerns a default account enabled in the firmware that could allow unauthorized arbitrary command execution.
Recommendations For NetApp AFF A700s Baseboard Management Controller (BMC) firmware versions 1.22 and higher, disable the default account to prevent unauthorized access.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-1188: Initialization of a Resource with an Insecure Default
Related identifiers
CVE-2019-5497
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com