CVE-2019-5490: Critical severity netapp service processor vulnerability
Published Mar 21, 2019
·Updated
Certain versions between 2.x to 5.x (refer to advisory) of the NetApp Service Processor firmware were shipped with a default account enabled that could allow unauthorized arbitrary command execution. Any platform listed in the advisory Impact section may be affected and should be upgraded to a fixed version of Service Processor firmware IMMEDIATELY.
Affected Software
108 affected components
All of the following
Any of the following
NetApp Service Processor=2.8
NetApp Service Processor=3.7
NetApp Service Processor=4.5
NetApp Service Processor=5.5
NetApp Clustered Data ONTAP=9.5
All of the following
Any of the following
NetApp Service Processor=2.8
NetApp Service Processor=3.7
NetApp Service Processor=4.5
NetApp Service Processor=5.5
NetApp Clustered Data ONTAP=9.4
All of the following
Any of the following
NetApp Service Processor=2.8
NetApp Service Processor=3.7
NetApp Service Processor=4.5
NetApp Service Processor=5.5
NetApp Clustered Data ONTAP=9.3
All of the following
Any of the following
NetApp Service Processor=2.5
NetApp Service Processor=3.4
NetApp Service Processor=3.4-patch1
NetApp Service Processor=3.4-patch2
NetApp Service Processor=4.2
NetApp Service Processor=4.2-patch1
NetApp Service Processor=4.2-patch2
NetApp Service Processor=5.2
NetApp Service Processor=5.2-patch1
NetApp Clustered Data ONTAP=9.2
All of the following
Any of the following
NetApp Service Processor=2.4.1
NetApp Service Processor=2.4.1-patch1
NetApp Service Processor=3.3
NetApp Service Processor=3.3-patch1
NetApp Service Processor=3.3-patch2
NetApp Service Processor=3.3-patch3
NetApp Service Processor=3.3-patch4
NetApp Service Processor=4.1
NetApp Service Processor=4.1-patch1
NetApp Service Processor=4.1-patch2
NetApp Service Processor=4.1-patch3
NetApp Service Processor=4.1-patch4
NetApp Service Processor=4.1-patch5
NetApp Service Processor=4.1-patch6
NetApp Service Processor=5.1
NetApp Service Processor=5.1-patch1
NetApp Service Processor=5.1-patch2
NetApp Service Processor=5.1-patch3
NetApp Clustered Data ONTAP=9.1
All of the following
Any of the following
NetApp Service Processor=2.4
NetApp Service Processor=3.2
NetApp Clustered Data ONTAP=9.0
All of the following
Any of the following
NetApp Service Processor=2.3.2
NetApp Service Processor=2.3.2-patch1
NetApp Service Processor=2.3.2-patch2
NetApp Service Processor=2.3.2-patch3
NetApp Service Processor=3.1.2
NetApp Service Processor=3.1.2-patch1
NetApp Service Processor=3.1.2-patch2
NetApp Clustered Data ONTAP=8.3
All of the following
Any of the following
NetApp Service Processor=2.2.5
NetApp Service Processor=3.0.4
NetApp Clustered Data ONTAP=8.2
NetApp Service Processor=2.8
NetApp Service Processor=3.7
NetApp Service Processor=4.5
NetApp Service Processor=5.5
NetApp Clustered Data ONTAP=9.5
NetApp Clustered Data ONTAP=9.4
NetApp Clustered Data ONTAP=9.3
NetApp Service Processor=2.5
NetApp Service Processor=3.4
NetApp Service Processor=3.4-patch1
NetApp Service Processor=3.4-patch2
NetApp Service Processor=4.2
NetApp Service Processor=4.2-patch1
NetApp Service Processor=4.2-patch2
NetApp Service Processor=5.2
NetApp Service Processor=5.2-patch1
NetApp Clustered Data ONTAP=9.2
NetApp Service Processor=2.4.1
NetApp Service Processor=2.4.1-patch1
NetApp Service Processor=3.3
NetApp Service Processor=3.3-patch1
NetApp Service Processor=3.3-patch2
NetApp Service Processor=3.3-patch3
NetApp Service Processor=3.3-patch4
NetApp Service Processor=4.1
NetApp Service Processor=4.1-patch1
NetApp Service Processor=4.1-patch2
NetApp Service Processor=4.1-patch3
NetApp Service Processor=4.1-patch4
NetApp Service Processor=4.1-patch5
NetApp Service Processor=4.1-patch6
NetApp Service Processor=5.1
NetApp Service Processor=5.1-patch1
NetApp Service Processor=5.1-patch2
NetApp Service Processor=5.1-patch3
NetApp Clustered Data ONTAP=9.1
NetApp Service Processor=2.4
NetApp Service Processor=3.2
NetApp Clustered Data ONTAP=9.0
NetApp Service Processor=2.3.2
NetApp Service Processor=2.3.2-patch1
NetApp Service Processor=2.3.2-patch2
NetApp Service Processor=2.3.2-patch3
NetApp Service Processor=3.1.2
NetApp Service Processor=3.1.2-patch1
NetApp Service Processor=3.1.2-patch2
NetApp Clustered Data ONTAP=8.3
NetApp Service Processor=2.2.5
NetApp Service Processor=3.0.4
NetApp Clustered Data ONTAP=8.2
Event History
Mar 21, 2019
CVE Published
via MITRE·06:25 PM
Data Sourced
via MITRE·06:25 PM
DescriptionWeakness
Data Sourced
via NVD·07:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this NetApp Service Processor firmware vulnerability?
The vulnerability ID of this NetApp Service Processor firmware vulnerability is CVE-2019-5490.
2
What versions of the NetApp Service Processor firmware are affected by this vulnerability?
Certain versions between 2.x to 5.x of the NetApp Service Processor firmware are affected by this vulnerability.
3
How severe is the CVE-2019-5490 vulnerability?
The severity of the CVE-2019-5490 vulnerability is critical with a severity value of 9.8.
4
How can I fix the CVE-2019-5490 vulnerability?
To fix the CVE-2019-5490 vulnerability, affected platforms should be upgraded to a fixed version of the NetApp Service Processor firmware.
5
Where can I find more information about the CVE-2019-5490 vulnerability?
More information about the CVE-2019-5490 vulnerability can be found in the advisory provided by NetApp.