CVE Catalog

CVE-2016-5711

Critical
Published: Translated: NVD NIST

Summary

NetApp Virtual Storage Console for VMware vSphere before version 6.2.1 uses a non-unique certificate, allowing remote attackers to conduct man-in-the-middle attacks via unspecified vectors.

Risk Assessment

Exploitation of this vulnerability may lead to interception of data transmitted between users and the server, posing a serious threat to the confidentiality of information within the organization.

Recommendation

It is recommended to upgrade to version 6.2.1 or later to mitigate this vulnerability and ensure certificate uniqueness.

Original NVD description (English source)

NetApp Virtual Storage Console for VMware vSphere before 6.2.1 uses a non-unique certificate, which allows remote attackers to conduct man-in-the-middle attacks via unspecified vectors.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS