CVE-2021-27005 — Uncontrolled Resource Consumption in Ontap System Manager

CWE-400 — Uncontrolled Resource Consumption3 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.7%
top 27.91%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Netapp Ontap System ManagerNetapp Clustered Data Ontap
Timeline
PublishedNov 1
Latest updateMay 24

Description

Clustered Data ONTAP versions 9.6 and higher prior to 9.6P16, 9.7P16, 9.8P7 and 9.9.1P3 are susceptible to a vulnerability which could allow a remote attacker to cause a crash of the httpd server.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5netapp/clustered_data_ontapClustered Data ONTAP versions 9.6 and higher prior to 9.6P16, 9.7P16, 9.8P7 and 9.9.1P3
▶NVDnetapp/ontap_system_manager9.0 — 9.7+3

Patches

Patch: security.netapp.com ↗Patch: security.netapp.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-p7px-h3hv-hg2v: Clustered Data ONTAP versions 9↗2022-05-24
▶
CVEList
CVE-2021-27005: Clustered Data ONTAP versions 9↗2021-11-01
▶