CVE-2019-5497: Critical severity netapp a700 firmware vulnerability

Published Jul 1, 2019

Updated

NetApp AFF A700s Baseboard Management Controller (BMC) firmware versions 1.22 and higher were shipped with a default account enabled that could allow unauthorized arbitrary command execution.

Affected Software

3 affected components

NetApp Aff A700s Firmware>=1.22

NetApp AFF A700s

NetApp Clustered Data ONTAP

Event History

Jul 1, 2019

CVE Published

via MITRE·08:12 PM

Data Sourced

via MITRE·08:12 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2019-5497?

CVE-2019-5497 is a vulnerability found in NetApp AFF A700s Baseboard Management Controller (BMC) firmware versions 1.22 and higher that allows unauthorized arbitrary command execution.

How severe is CVE-2019-5497?

CVE-2019-5497 is classified as critical with a severity value of 9.8.

Which software versions are affected by CVE-2019-5497?

NetApp AFF A700s Baseboard Management Controller (BMC) firmware versions 1.22 and higher are affected by CVE-2019-5497.

How can CVE-2019-5497 be fixed?

To fix CVE-2019-5497, users should update the NetApp AFF A700s Baseboard Management Controller (BMC) firmware to a version higher than 1.22.

Where can I find more information about CVE-2019-5497?

More information about CVE-2019-5497 can be found at the following link: https://security.netapp.com/advisory/ntap-20190627-0001/