CVE-2018-5498 — Improper Input Validation in Clustered Data Ontap

CWE-20 — Improper Input Validation4 documents4 sources
Severity
4.4MEDIUMNVD
EPSS
0.5%
top 33.47%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Netapp Clustered Data Ontap
Timeline
PublishedFeb 1
Latest updateMay 14

Description

Clustered Data ONTAP versions 9.0 through 9.4 are susceptible to a vulnerability which allows remote authenticated attackers to cause a Denial of Service (DoS) in NFS and SMB environments. Exploitation of this vulnerability will allow a remote authenticated attacker to cause a Denial of Service (DoS) on affected versions of clustered Data ONTAP configured for multiprotocol access.

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:HExploitability: 0.7 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5netapp/clustered_data_ontapVersions 9.0 and higher

Patches

Patch: security.netapp.com ↗Patch: security.netapp.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-f3rh-3xh6-39mj: Clustered Data ONTAP versions 9↗2022-05-14
▶
CVEList
CVE-2018-5498: Clustered Data ONTAP versions 9↗2019-02-01
▶

💥Exploits & PoCs

1
Exploit-DB
Anviz AIM CrossChex Standard 4.3 - CSV Injection↗2018-11-02
▶
CVE-2018-5498 — Improper Input Validation | cvebase