CVE-2020-8577 — E-series Santricity OS Controller Software vulnerability

3 documents3 sources

Severity

5.9MEDIUMNVD

EPSS

0.3%

top 44.64%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Netapp E-series Santricity OS Controller Software Netapp E-series Santricity OS Controller

Timeline

PublishedNov 6

Latest updateMay 24

Description

SANtricity OS Controller Software versions 11.50.1 and higher are susceptible to a vulnerability which could allow an attacker to discover sensitive information by intercepting its transmission within an https session.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 2.2 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5netapp/e-series_santricity_os_controller_software11.50.1 and higher

▶NVDnetapp/e-series_santricity_os_controller

🔴Vulnerability Details

GHSA

GHSA-38mh-jhrf-5454: SANtricity OS Controller Software versions 11↗2022-05-24

▶

CVEList

CVE-2020-8577: SANtricity OS Controller Software versions 11↗2020-11-06

▶