What is the severity of CVE-2021-27005?

CVE-2021-27005 is classified as a medium severity vulnerability.

How does CVE-2021-27005 affect NetApp OnCommand System Manager?

CVE-2021-27005 allows a remote attacker to crash the httpd server in affected versions of NetApp OnCommand System Manager.

How do I fix CVE-2021-27005?

To mitigate CVE-2021-27005, upgrade your NetApp OnCommand System Manager to a version that is patched, such as 9.6P16, 9.7P16, 9.8P7, or 9.9.1P3.

Which versions of NetApp software are affected by CVE-2021-27005?

CVE-2021-27005 affects Clustered Data ONTAP versions 9.6 and higher, specifically those prior to 9.6P16, 9.7P16, 9.8P7, and 9.9.1P3.

Is it possible for CVE-2021-27005 to be exploited remotely?

Yes, CVE-2021-27005 can be exploited remotely by an attacker to crash the httpd server.

Vulnerability/
CVE-2021-27005

high

7.5

1/11/2021

3/8/2024

CVE-2021-27005

First published: Mon Nov 01 2021(Updated: )

Clustered Data ONTAP versions 9.6 and higher prior to 9.6P16, 9.7P16, 9.8P7 and 9.9.1P3 are susceptible to a vulnerability which could allow a remote attacker to cause a crash of the httpd server.

Credit: security-alert@netapp.com

Affected Software	Affected Version	How to fix
NetApp OnCommand System Manager	>=9.0<9.7
NetApp OnCommand System Manager	=9.7
NetApp OnCommand System Manager	=9.8
NetApp OnCommand System Manager	=9.9.12

Remedy

https://security.netapp.com/advisory/NTAP-20211029-0002/

Never miss a vulnerability like this again

Reference Links

https://security.netapp.com/advisory/NTAP-20211029-0002/

Frequently Asked Questions

What is the severity of CVE-2021-27005?
CVE-2021-27005 is classified as a medium severity vulnerability.
How does CVE-2021-27005 affect NetApp OnCommand System Manager?
CVE-2021-27005 allows a remote attacker to crash the httpd server in affected versions of NetApp OnCommand System Manager.
How do I fix CVE-2021-27005?
To mitigate CVE-2021-27005, upgrade your NetApp OnCommand System Manager to a version that is patched, such as 9.6P16, 9.7P16, 9.8P7, or 9.9.1P3.
Which versions of NetApp software are affected by CVE-2021-27005?
CVE-2021-27005 affects Clustered Data ONTAP versions 9.6 and higher, specifically those prior to 9.6P16, 9.7P16, 9.8P7, and 9.9.1P3.
Is it possible for CVE-2021-27005 to be exploited remotely?
Yes, CVE-2021-27005 can be exploited remotely by an attacker to crash the httpd server.

agent/type
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/remedy
agent/author
agent/severity
agent/references
agent/event
agent/first-publish-date
agent/description
agent/source
agent/softwarecombine
agent/tags
collector/nvd-index
agent/software-canonical-lookup
agent/software-canonical-lookup-request
vendor/netapp
canonical/netapp oncommand system manager
version/netapp oncommand system manager/9.0
version/netapp oncommand system manager/9.7
version/netapp oncommand system manager/9.8
version/netapp oncommand system manager/9.9.12

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.