CVE-2023-27314

published 2023-10-12

CVE-2023-27314: ONTAP 9 versions prior to 9.8P19, 9.9.1P16, 9.10.1P12, 9.11.1P8, 9.12.1P2 and 9.13.1 are susceptible to a vulnerability which could allow a remote…

Priority P3 43 high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

ONTAP 9 versions prior to 9.8P19, 9.9.1P16, 9.10.1P12, 9.11.1P8,
9.12.1P2 and 9.13.1 are susceptible to a vulnerability which could allow
a remote unauthenticated attacker to cause a crash of the HTTP service.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
netapp	clustered_data_ontap	—	—
netapp	clustered_data_ontap	—	—
netapp	clustered_data_ontap	—	—
netapp	clustered_data_ontap	—	—
netapp	clustered_data_ontap	—	—
netapp	clustered_data_ontap	—	—
netapp	clustered_data_ontap	>= 9.0 < 9.8	9.8
netapp	ontap_9	< 9.8P19, 9.9.1P16, 9.10.1P12, 9.11.1P8, 9.12.1P2, 9.13.1	9.8P19, 9.9.1P16, 9.10.1P12, 9.11.1P8, 9.12.1P2, 9.13.1

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-400