Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ditional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103180 - https://ics-cert.us-cert.gov/advisories/ICSA-18-058-03
CVE ID: CVE-2018-5453 State: PUBLISHED Published: 2018-03-05T17:00:00 Last Updated: 2024-08-05T05:33:44.390Z Vendors: n/a Products: Moxa OnCell G3100-HSPA Series Problem Types: CWE-130 Description: An Improper Handling of Length Parameter Inconsistency issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. An attacker may be able to edit the element of an HTTP request, causing the device to become unavailable. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-060-02
CVE ID: CVE-2018-5454 State: PUBLISHED Published: 2018-03-26T14:00:00Z Last Updated: 2024-09-16T16:57:42.535Z Vendors: Philips Products: Philips IntelliSpace Portal Problem Types: CWE-489 Description: Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a vulnerability where code debugging methods are enabled, which could allow an attacker to remotely execute arbitrary code during runtime. Additional Analyst Notes: - CVE Program Container: References: - https://www.usa.philips.com/healthcare/about/customer-support/product-security - http://www.securityfocus.com/bid/103182 - https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
CVE ID: CVE-2018-5455 State: PUBLISHED Published: 2018-03-05T17:00:00 Last Updated: 2024-08-05T05:33:44.372Z Vendors: n/a Products: Moxa OnCell G3100-HSPA Series Problem Types: CWE-565 Description: A Reliance on Cookies without Validation and Integrity Checking issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. The application allows a cookie parameter to consist of only digits, allowing an attacker to perform a brute force attack bypassing authentication and gaining access to device functions. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-060-02
CVE ID: CVE-2018-5457 State: PUBLISHED Published: 2018-02-06T20:00:00 Last Updated: 2024-08-05T05:33:44.396Z Vendors: n/a Products: Vyaire Medical CareFusion Upgrade Utility Vulnerability Problem Types: CWE-427 Description: A uncontrolled search path element issue was discovered in Vyaire Medical CareFusion Upgrade Utility used with Windows XP systems, Versions 2.0.2.2 and prior versions. A successful exploit of this vulnerability requires the local user to install a crafted DLL on the target machine. The application loads the DLL and gives the attacker access at the same privilege level as the application. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-
rivilege level as the application. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-01 - http://www.securityfocus.com/bid/102983
CVE ID: CVE-2018-5458 State: PUBLISHED Published: 2018-03-26T14:00:00Z Last Updated: 2024-09-17T03:53:33.571Z Vendors: Philips Products: Philips IntelliSpace Portal Problem Types: CWE-310 Description: Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a vulnerability using SSL legacy encryption that could allow an attacker to gain unauthorized access to resources and information. Additional Analyst Notes: - CVE Program Container: References: - https://www.usa.philips.com/healthcare/about/customer-support/product-security - http://www.securityfocus.com/bid/103182 - https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
CVE ID: CVE-2018-5459 State: PUBLISHED Published: 2018-02-13T21:00:00 Last Updated: 2024-08-05T05:33:44.375Z Vendors: n/a Products: WAGO PFC200 Series Problem Types: CWE-287 Description: An Improper Authentication issue was discovered in WAGO PFC200 Series 3S CoDeSys Runtime versions 2.3.X and 2.4.X. An attacker can execute different unauthenticated remote operations because of the CoDeSys Runtime application, which is available via network by default on Port 2455. An attacker could execute some unauthenticated commands such as reading, writing, or deleting arbitrary files, or manipulate the PLC application during runtime by sending specially-crafted TCP packets to Port 2455. Additional Anal
or manipulate the PLC application during runtime by sending specially-crafted TCP packets to Port 2455. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-044-01
CVE ID: CVE-2018-5461 State: PUBLISHED Published: 2018-03-06T21:00:00 Last Updated: 2024-08-05T05:33:44.334Z Vendors: n/a Products: Hirschmann Automation and Control GmbH Classic Platform Switches Problem Types: CWE-326 Description: An Inadequate Encryption Strength issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. An inadequate encryption strength vulnerability in the web interface has been identified, which may allow an attacker to obtain sensitive information through a successful man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103340 - h
dle attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103340 - https://ics-cert.us-cert.gov/advisories/ICSA-18-065-01
CVE ID: CVE-2018-5462 State: PUBLISHED Published: 2018-03-26T14:00:00Z Last Updated: 2024-09-16T16:14:03.659Z Vendors: Philips Products: Philips IntelliSpace Portal Problem Types: CWE-310 Description: Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an SSL incorrect hostname certificate vulnerability this could allow an attacker to gain unauthorized access to resources and information. Additional Analyst Notes: - CVE Program Container: References: - https://www.usa.philips.com/healthcare/about/customer-support/product-security - http://www.securityfocus.com/bid/103182 - https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
CVE ID: CVE-2018-5463 State: PUBLISHED Published: 2018-04-09T21:00:00Z Last Updated: 2024-09-16T20:26:49.223Z Vendors: ICS-CERT Products: LCDS - Le&#195;&#163;o Consultoria e Desenvolvimento de Sistemas LTDA ME LAquis SCADA Problem Types: CWE-703 Description: A structured exception handler overflow vulnerability in Leao Consultoria e Desenvolvimento de Sistemas (LCDS) LTDA ME LAquis SCADA 4.1.0.3391 and earlier may allow code execution. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-095-03 - http://www.securityfocus.com/bid/103724
CVE ID: CVE-2018-5464 State: PUBLISHED Published: 2018-03-26T14:00:00Z Last Updated: 2024-09-16T23:10:46.604Z Vendors: Philips Products: Philips IntelliSpace Portal Problem Types: CWE-310 Description: Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an untrusted SSL certificate vulnerability this could allow an attacker to gain unauthorized access to resources and information. Additional Analyst Notes: - CVE Program Container: References: - https://www.usa.philips.com/healthcare/about/customer-support/product-security - http://www.securityfocus.com/bid/103182 - https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
CVE ID: CVE-2018-5465 State: PUBLISHED Published: 2018-03-06T21:00:00 Last Updated: 2024-08-05T05:33:44.417Z Vendors: n/a Products: Hirschmann Automation and Control GmbH Classic Platform Switches Problem Types: CWE-384 Description: A Session Fixation issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. A session fixation vulnerability in the web interface has been identified, which may allow an attacker to hijack web sessions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103340 - https://ics-cert.us-cert.gov/advisories/ICSA-18-065-01
CVE ID: CVE-2018-5466 State: PUBLISHED Published: 2018-03-26T14:00:00Z Last Updated: 2024-09-17T00:21:12.905Z Vendors: Philips Products: Philips IntelliSpace Portal Problem Types: CWE-310 Description: Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a self-signed SSL certificate vulnerability this could allow an attacker to gain unauthorized access to resources and information. Additional Analyst Notes: - CVE Program Container: References: - https://www.usa.philips.com/healthcare/about/customer-support/product-security - http://www.securityfocus.com/bid/103182 - https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
CVE ID: CVE-2018-5467 State: PUBLISHED Published: 2018-03-06T21:00:00 Last Updated: 2024-08-05T05:33:44.439Z Vendors: n/a Products: Hirschmann Automation and Control GmbH Classic Platform Switches Problem Types: CWE-598 Description: An Information Exposure Through Query Strings in GET Request issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. An information exposure through query strings vulnerability in the web interface has been identified, which may allow an attacker to impersonate a legitimate user. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103340 - https:/
user. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103340 - https://ics-cert.us-cert.gov/advisories/ICSA-18-065-01
CVE ID: CVE-2018-5468 State: PUBLISHED Published: 2018-03-26T14:00:00Z Last Updated: 2024-09-16T17:38:00.448Z Vendors: Philips Products: Philips IntelliSpace Portal Problem Types: CWE-264 Description: Philips Intellispace Portal all versions 7.0.x and 8.0.x have a remote desktop access vulnerability that could allow an attacker to gain unauthorized access and in some cases escalate their level of privilege or execute arbitrary code Additional Analyst Notes: - CVE Program Container: References: - https://www.usa.philips.com/healthcare/about/customer-support/product-security - http://www.securityfocus.com/bid/103182 - https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
CVE ID: CVE-2018-5469 State: PUBLISHED Published: 2018-03-06T21:00:00 Last Updated: 2024-08-05T05:33:44.365Z Vendors: n/a Products: Hirschmann Automation and Control GmbH Classic Platform Switches Problem Types: CWE-307 Description: An Improper Restriction of Excessive Authentication Attempts issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. An improper restriction of excessive authentication vulnerability in the web interface has been identified, which may allow an attacker to brute force authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103340 - http
ication. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103340 - https://ics-cert.us-cert.gov/advisories/ICSA-18-065-01
CVE ID: CVE-2018-5470 State: PUBLISHED Published: 2018-03-26T14:00:00Z Last Updated: 2024-09-16T23:01:40.163Z Vendors: Philips Products: Philips IntelliSpace Portal Problem Types: CWE-428 Description: Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an unquoted search path or element vulnerability that has been identified, which may allow an authorized local user to execute arbitrary code and escalate their level of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.usa.philips.com/healthcare/about/customer-support/product-security - http://www.securityfocus.com/bid/103182 - https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
CVE ID: CVE-2018-5471 State: PUBLISHED Published: 2018-03-06T21:00:00 Last Updated: 2024-08-05T05:33:44.433Z Vendors: n/a Products: Hirschmann Automation and Control GmbH Classic Platform Switches Problem Types: CWE-319 Description: A Cleartext Transmission of Sensitive Information issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. A cleartext transmission of sensitive information vulnerability in the web interface has been identified, which may allow an attacker to obtain sensitive information through a successful man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.
ough a successful man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103340 - https://ics-cert.us-cert.gov/advisories/ICSA-18-065-01
CVE ID: CVE-2018-5472 State: PUBLISHED Published: 2018-03-26T14:00:00Z Last Updated: 2024-09-17T00:10:29.230Z Vendors: Philips Products: Philips IntelliSpace Portal Problem Types: CWE-264 Description: Philips Intellispace Portal all versions 7.0.x and 8.0.x have an insecure windows permissions vulnerability that could allow an attacker to gain unauthorized access and in some cases escalate their level of privilege or execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.usa.philips.com/healthcare/about/customer-support/product-security - http://www.securityfocus.com/bid/103182 - https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
CVE ID: CVE-2018-5473 State: PUBLISHED Published: 2018-02-19T18:00:00 Last Updated: 2024-08-05T05:40:49.830Z Vendors: n/a Products: GE D60 Line Distance Relay Problem Types: CWE-119 Description: An Improper Restriction of Operations within the Bounds of a Memory Buffer issue was discovered in GE D60 Line Distance Relay devices running firmware Version 7.11 and prior. The SSH functions of the device are vulnerable to buffer overflow conditions that may allow a remote attacker to execute arbitrary code on the device. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-046-02 - http://www.securityfocus.com/bid/103054
CVE ID: CVE-2018-5474 State: PUBLISHED Published: 2018-03-26T14:00:00Z Last Updated: 2024-09-16T17:14:11.452Z Vendors: Philips Products: Philips IntelliSpace Portal Problem Types: CWE-20 Description: Philips Intellispace Portal all versions 7.0.x and 8.0.x have an input validation vulnerability that could allow a remote attacker to execute arbitrary code or cause the application to crash. Additional Analyst Notes: - CVE Program Container: References: - https://www.usa.philips.com/healthcare/about/customer-support/product-security - http://www.securityfocus.com/bid/103182 - https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
CVE ID: CVE-2018-5475 State: PUBLISHED Published: 2018-02-19T18:00:00 Last Updated: 2024-08-05T05:40:49.854Z Vendors: n/a Products: GE D60 Line Distance Relay Problem Types: CWE-121 Description: A Stack-based Buffer Overflow issue was discovered in GE D60 Line Distance Relay devices running firmware Version 7.11 and prior. Multiple stack-based buffer overflow vulnerabilities have been identified, which may allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-046-02 - http://www.securityfocus.com/bid/103054
CVE ID: CVE-2018-5476 State: PUBLISHED Published: 2018-03-15T23:00:00 Last Updated: 2024-08-05T05:40:49.831Z Vendors: n/a Products: Delta Electronics Delta Industrial Automation DOPSoft Problem Types: CWE-121 Description: A Stack-based Buffer Overflow issue was discovered in Delta Electronics Delta Industrial Automation DOPSoft, Version 4.00.01 or prior. Stack-based buffer overflow vulnerabilities caused by processing specially crafted .dop or .dpb files may allow an attacker to remotely execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103195 - https://ics-cert.us-cert.gov/advisories/ICSA-18-060-03
CVE ID: CVE-2018-5477 State: PUBLISHED Published: 2018-02-20T19:00:00 Last Updated: 2024-08-05T05:40:49.808Z Vendors: n/a Products: ABB netCADOPS Web Application Problem Types: CWE-200 Description: An Information Exposure issue was discovered in ABB netCADOPS Web Application Version 3.4 and prior, netCADOPS Web Application Version 7.1 and prior, netCADOPS Web Application Version 7.2x and prior, netCADOPS Web Application Version 8.0 and prior, and netCADOPS Web Application Version 8.1 and prior. A vulnerability exists in the password entry section of netCADOPS Web Application that may expose critical database information. Additional Analyst Notes: - CVE Program Container: References: - https:
n that may expose critical database information. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-051-01 - http://www.securityfocus.com/bid/103089
CVE ID: CVE-2018-5478 State: PUBLISHED Published: 2023-09-21T00:00:00 Last Updated: 2024-09-24T18:43:21.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: Contao 3.x before 3.5.32 allows XSS via the unsubscribe module in the frontend newsletter extension. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/core/CVE-2018-5478.yaml - https://security.snyk.io/vuln/SNYK-PHP-CONTAOCORE-70397
CVE ID: CVE-2018-5479 State: PUBLISHED Published: 2018-01-15T16:00:00 Last Updated: 2024-08-05T05:40:50.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: FoxSash ImgHosting 1.5 (according to footer information) is vulnerable to XSS attacks. The affected function is its search engine via the search parameter to the default URI. Since there is an user/admin login interface, it's possible for attackers to steal sessions of users and thus admin(s). By sending users an infected URL, code will be executed. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43567/
CVE ID: CVE-2018-5480 State: REJECTED Published: 2020-05-08T14:17:35 Last Updated: 2020-05-08T14:17:35 Description: No description available.
CVE ID: CVE-2018-5481 State: PUBLISHED Published: 2019-01-07T15:00:00 Last Updated: 2024-08-05T05:40:49.842Z Vendors: NetApp Products: OnCommand Unified Manager for 7-Mode (core package) Problem Types: Man-in-the-middle (MITM) Description: OnCommand Unified Manager for 7-Mode (core package) prior to 5.2.4 uses cookies that lack the secure attribute in certain circumstances making it vulnerable to impersonation via man-in-the-middle (MITM) attacks. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20190104-0001/
CVE ID: CVE-2018-5482 State: PUBLISHED Published: 2019-03-04T23:00:00Z Last Updated: 2024-09-17T00:16:19.973Z Vendors: NetApp Products: SnapCenter Server Problem Types: Secure cookie Description: NetApp SnapCenter Server prior to 4.1 does not set the secure flag for a sensitive cookie in an HTTPS session which can allow the transmission of the cookie in plain text over an unencrypted channel. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107274 - https://security.netapp.com/advisory/ntap-20190304-0001/
CVE ID: CVE-2018-5483 State: REJECTED Published: 2022-08-25T17:22:11 Last Updated: 2022-08-25T17:22:11 Description: No description available.
CVE ID: CVE-2018-5484 State: REJECTED Published: 2020-05-08T15:10:42 Last Updated: 2020-05-08T15:10:42 Description: No description available.
CVE ID: CVE-2018-5485 State: PUBLISHED Published: 2018-05-24T14:00:00Z Last Updated: 2024-09-16T23:26:48.902Z Vendors: NetApp Products: OnCommand Unified Manager for Windows Problem Types: Privilege Escalation Description: NetApp OnCommand Unified Manager for Windows versions 7.2 through 7.3 are susceptible to a vulnerability which could lead to a privilege escalation attack. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20180523-0002/
CVE ID: CVE-2018-5486 State: PUBLISHED Published: 2018-04-25T21:00:00Z Last Updated: 2024-09-16T22:35:03.390Z Vendors: NetApp Products: OnCommand Unified Manager for Linux Problem Types: CWE 250 Description: NetApp OnCommand Unified Manager for Linux versions 7.2 though 7.3 ship with the Java Debug Wire Protocol (JDWP) enabled which allows unauthorized local attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20180425-0001/
CVE ID: CVE-2018-5487 State: PUBLISHED Published: 2018-05-24T14:00:00Z Last Updated: 2024-09-16T22:30:40.380Z Vendors: NetApp Products: OnCommand Unified Manager for Linux Problem Types: Remote Code Execution Description: NetApp OnCommand Unified Manager for Linux versions 7.2 through 7.3 ship with the Java Management Extension Remote Method Invocation (JMX RMI) service bound to the network, and are susceptible to unauthenticated remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20180523-0001/
CVE ID: CVE-2018-5488 State: PUBLISHED Published: 2018-06-13T20:00:00Z Last Updated: 2024-09-16T23:01:43.380Z Vendors: NetApp Products: SANtricity Products Problem Types: Unauthenticated Remote Code Execution Description: NetApp SANtricity Web Services Proxy versions 1.10.x000.0002 through 2.12.X000.0002 and SANtricity Storage Manager 11.30.0X00.0004 through 11.42.0X00.0001 ship with the Java Management Extension Remote Method Invocation (JMX RMI) service bound to the network, and are susceptible to unauthenticated remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104462 - https://security.netapp.com/advisory/ntap-2018061
ram Container: References: - http://www.securityfocus.com/bid/104462 - https://security.netapp.com/advisory/ntap-20180612-0001/
CVE ID: CVE-2018-5489 State: PUBLISHED Published: 2018-08-03T13:00:00Z Last Updated: 2024-09-17T01:51:07.588Z Vendors: NetApp Products: 7-Mode Transition Tool Problem Types: File Authorization Bypass Description: NetApp 7-Mode Transition Tool allows users with valid credentials to access functions and information which may have been intended to be restricted to administrators or privileged users. 7MTT versions below 2.0 do not enforce user authorization rules on file information and status that it has previously collected. The released version of 7MTT has been updated to maintain and verify authorization rules for file information, status and utilities. Additional Analyst Notes: - CVE Progra
intain and verify authorization rules for file information, status and utilities. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20150323-0001/
CVE ID: CVE-2018-5490 State: PUBLISHED Published: 2018-08-03T19:00:00Z Last Updated: 2024-09-16T17:22:52.478Z Vendors: NetApp Products: Clustered Data ONTAP Problem Types: Unauthorized Write Access Description: Read-Only export policy rules are not correctly enforced in Clustered Data ONTAP 8.3 Release Candidate versions and therefore may allow more than "read-only" access from authenticated SMBv2 and SMBv3 clients. This behavior has been resolved in the GA release. Customers running prior release candidates (RCs) are requested to update their systems to the NetApp Data ONTAP 8.3 GA release. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory
AP 8.3 GA release. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20150324-0001/
CVE ID: CVE-2018-5491 State: REJECTED Published: 2020-05-08T14:17:06 Last Updated: 2020-05-08T14:17:06 Description: No description available.
CVE ID: CVE-2018-5492 State: PUBLISHED Published: 2018-10-04T13:00:00Z Last Updated: 2024-09-17T01:21:51.777Z Vendors: NetApp Products: E-Series SANtricity OS Controller Software Problem Types: Remote Code Execution Description: NetApp E-Series SANtricity OS Controller Software 11.30 and later version 11.30.5 is susceptible to unauthenticated remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20181003-0001/