PT-2020-9888
CVE-2019-17274
·
Published
2020-02-26
·
Updated
2020-08-24
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
NetApp FAS 8300/8700 and AFF A400 Baseboard Management Controller (BMC) firmware versions prior to 13.1P1
Description
The issue allows unauthorized arbitrary command execution via local access due to a default account being enabled.
Recommendations
For versions prior to 13.1P1, update the firmware to version 13.1P1 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾