high7.8
CVE-2019-17274
NetApp FAS 8300/8700 and AFF A400 Baseboard Management Controller (BMC) firmware versions 13.x prior to 13.1P1 were shipped with a default account enabled that…
Impact
NetApp FAS 8300/8700 and AFF A400 Baseboard Management Controller (BMC) firmware versions 13.x prior to 13.1P1 were shipped with a default account enabled that could allow unauthorized arbitrary command execution via local access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netapp | Fabric-Attached Storage 8700 Firmware | through 13.1 |
| Netapp | Fabric-Attached Storage 8300 Firmware | through 13.1 |
| Netapp | All Flash Fabric-Attached Storage A400 Firmware | through 13.1 |