CVE-2017-12423
HighSummary
NetApp Clustered Data ONTAP 8.3.x before 8.3.2P12 allows remote authenticated users to read data on other Storage Virtual Machines (SVMs) via unspecified vectors.
Risk Assessment
The organization may be exposed to unauthorized access to data stored on other SVMs, potentially leading to data leakage and privacy violations.
Recommendation
It is recommended to upgrade to version 8.3.2P12 or later to mitigate this vulnerability and restrict access to SVMs for remote users.
Other vulnerabilities in NetApp Clustered Data ONTAP
See all- CVE-2017-12421High
NetApp Clustered Data ONTAP versions 8.3.x before 8.3.2P12 allow remote authenticated users to execute arbitrary code on the storage controller via unspecified vectors.
- CVE-2017-12420High
A heap-based buffer overflow in the SMB implementation in NetApp Clustered Data ONTAP before version 8.3.2P8 and 9.0 before P2 allows remote authenticated users to cause a denial of service or execute arbitrary code.
- CVE-2016-3997High
NetApp Clustered Data ONTAP has a vulnerability that allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service due to the failure to enable SMB signing enforcement in its default state.
- CVE-2017-5988High
NetApp Clustered Data ONTAP versions 8.1 through 9.1P1, when NFS or SMB is enabled, allows remote attackers to cause a denial of service via unspecified vectors.
- CVE-2016-4341High
NetApp Clustered Data ONTAP before 8.3.2P7 allows remote attackers to obtain SMB share information via unspecified vectors.
Original NVD description (English source)
NetApp Clustered Data ONTAP 8.3.x before 8.3.2P12 allows remote authenticated users to read data on other Storage Virtual Machines (SVMs) via unspecified vectors.