CVE-2021-26989: Medium severity ibm network appliance data ontap vulnerability
Published Mar 4, 2021
·Updated
Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P9 and 9.8 are susceptible to a vulnerability which could allow a remote authenticated attacker to cause a Denial of Service (DoS) on clustered Data ONTAP configured for SMB access.
Affected Software
58 affected components
NetApp Data ONTAP=9.3.0
NetApp Data ONTAP=9.3.0-p1
NetApp Data ONTAP=9.3.0-p10
NetApp Data ONTAP=9.3.0-p11
NetApp Data ONTAP=9.3.0-p12
NetApp Data ONTAP=9.3.0-p13
NetApp Data ONTAP=9.3.0-p14
NetApp Data ONTAP=9.3.0-p15
NetApp Data ONTAP=9.3.0-p16
NetApp Data ONTAP=9.3.0-p17
NetApp Data ONTAP=9.3.0-p18
NetApp Data ONTAP=9.3.0-p19
NetApp Data ONTAP=9.3.0-p2
NetApp Data ONTAP=9.3.0-p20
NetApp Data ONTAP=9.3.0-p3
NetApp Data ONTAP=9.3.0-p4
NetApp Data ONTAP=9.3.0-p5
NetApp Data ONTAP=9.3.0-p6
NetApp Data ONTAP=9.3.0-p7
NetApp Data ONTAP=9.3.0-p8
NetApp Data ONTAP=9.3.0-p9
NetApp Data ONTAP=9.5.0
NetApp Data ONTAP=9.5.0-p1
NetApp Data ONTAP=9.5.0-p10
NetApp Data ONTAP=9.5.0-p11
NetApp Data ONTAP=9.5.0-p12
NetApp Data ONTAP=9.5.0-p13
NetApp Data ONTAP=9.5.0-p14
NetApp Data ONTAP=9.5.0-p15
NetApp Data ONTAP=9.5.0-p2
NetApp Data ONTAP=9.5.0-p3
NetApp Data ONTAP=9.5.0-p4
NetApp Data ONTAP=9.5.0-p5
NetApp Data ONTAP=9.5.0-p6
NetApp Data ONTAP=9.5.0-p7
NetApp Data ONTAP=9.5.0-p8
NetApp Data ONTAP=9.5.0-p9
NetApp Data ONTAP=9.6.0
NetApp Data ONTAP=9.6.0-p1
NetApp Data ONTAP=9.6.0-p10
NetApp Data ONTAP=9.6.0-p11
NetApp Data ONTAP=9.6.0-p2
NetApp Data ONTAP=9.6.0-p3
NetApp Data ONTAP=9.6.0-p4
NetApp Data ONTAP=9.6.0-p5
NetApp Data ONTAP=9.6.0-p6
NetApp Data ONTAP=9.6.0-p7
NetApp Data ONTAP=9.6.0-p8
NetApp Data ONTAP=9.6.0-p9
NetApp Data ONTAP=9.7.0
NetApp Data ONTAP=9.7.0-p1
NetApp Data ONTAP=9.7.0-p2
NetApp Data ONTAP=9.7.0-p3
NetApp Data ONTAP=9.7.0-p4
NetApp Data ONTAP=9.7.0-p5
NetApp Data ONTAP=9.7.0-p6
NetApp Data ONTAP=9.7.0-p7
NetApp Data ONTAP=9.8.0
Remediation
Patch Available
Event History
Mar 4, 2021
CVE Published
via MITRE·08:47 PM
Data Sourced
via MITRE·08:47 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-26989?
The severity of CVE-2021-26989 is classified as high, as it can lead to a Denial of Service (DoS) on affected systems.
2
How do I fix CVE-2021-26989?
To mitigate CVE-2021-26989, upgrade Clustered Data ONTAP to version 9.3P21, 9.5P16, 9.6P12, 9.7P9, or 9.8.
3
Which versions are affected by CVE-2021-26989?
CVE-2021-26989 affects Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P9, and 9.8.
4
Can CVE-2021-26989 be exploited remotely?
Yes, CVE-2021-26989 can be exploited by a remote authenticated attacker.
5
What impact does CVE-2021-26989 have on the system?
CVE-2021-26989 can lead to a Denial of Service, potentially disrupting access to SMB services.