Vulnerability CVE-2020-8584

Vulnerability CVE-2020-8584

Published: 2021-01-08

Description:

Element OS versions prior to 1.8P1 and 12.2 are susceptible to a vulnerability that could allow an unauthenticated remote attacker to perform arbitrary code execution.

Type:

CWE-94

(Improper Control of Generation of Code ('Code Injection'))

CVSS2 => (AV:N/AC:L/Au:N/C:C/I:C/A:C)

CVSS Base Score	Impact Subscore	Exploitability Subscore
10/10	10/10	10/10

Exploit range	Attack complexity	Authentication
Remote	Low	No required
Confidentiality impact	Integrity impact	Availability impact
Complete	Complete	Complete

Affected software
Netapp -> Hci management node
Netapp -> Solidfire
Netapp -> Hci storage node
Netapp -> Element os

References:

https://security.netapp.com/advisory/ntap-20210108-0008/

Copyright 2024, cxsecurity.com