CVE-2021-27005

High

Description

Clustered Data ONTAP versions 9.6 and higher prior to 9.6P16, 9.7P16, 9.8P7 and 9.9.1P3 are susceptible to a vulnerability which could allow a remote attacker to cause a crash of the httpd server.

SeverityHigh
CVSS7.5
Exploit probability—
ProductNetapp Ontap System Manager
PublishedNov 1, 2021
First seenNov 1, 2021

How to fix

Update
  • netapp ontap_system_manager9.7 or later

Affected products

ProductAffected versionsFixed in
netapp ontap_system_manager9.0 ≤ v < 9.7, 9.7, 9.8, 9.9.129.7

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.