CVE Feed

    Dashboard / CVE / CVE-2019-5497

    CVE-2019-5497

    NetApp AFF A700s Baseboard Management Controller (BMC) firmware versions 1.22 and higher were shipped with a default account enabled that could allow unauthorized arbitrary command execution.

    Published:Jul 1, 2019
    Last Modified:Nov 21, 2024
    EPS:Jul 1, 2019
    EPSS Score:0.00957
    CVSS Score:9.8

    Affected Products

    Vendor
    Netapp
    Product
    Aff A700s
    Vendor
    Netapp
    Product
    Aff A700s Firmware
    Vendor
    Netapp
    Product
    Clustered Data Ontap

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-665 Exploitation of Thunderbolt Protection Flaws

    Related CVEs

    CVE-2021-33060 (CVSS 7.8) — Out-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to poten…
    CVE-2021-20322 (CVSS 7.4) — A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel …
    CVE-2020-14145 (CVSS 5.9) — The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the…
    CVE-2020-8832 (CVSS 5.5) — The fix for the Linux kernel in Ubuntu 18.04 LTS for CVE-2019-14615 ("The Linux kernel did not properly clear …
    CVE-2020-12464 (CVSS 6.7) — usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a tr…
    CVE-2019-19813 (CVSS 5.5) — In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and then ma…
    CVE-2019-19816 (CVSS 7.8) — In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image and performing some operations can cause…
    CVE-2019-19318 (CVSS 4.4) — In the Linux kernel 5.3.11, mounting a crafted btrfs image twice can cause an rwsem_down_write_slowpath use-af…
    CVE-2019-19069 (CVSS 7.5) — A memory leak in the fastrpc_dma_buf_attach() function in drivers/misc/fastrpc.c in the Linux kernel before 5.…
    CVE-2019-19050 (CVSS 7.5) — A memory leak in the crypto_reportstat() function in crypto/crypto_user_stat.c in the Linux kernel through 5.3…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High