mickmick.net

NetApp Products Multiple Vulnerabilities

Release Date: 26 Jul 2023

RISK: Medium Risk

TYPE: Servers - Other Servers

Multiple vulnerabilities were identified in NetApp Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, sensitive information disclosure and data manipulation on the targeted system.

---

Impact

• Denial of Service
• Data Manipulation
• Information Disclosure

---

System / Technologies affected

• Management Services for Element Software and NetApp HCI

 

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

 

• https://security.netapp.com/advisory/ntap-20230725-0006/
• https://security.netapp.com/advisory/ntap-20230725-0002/
• https://security.netapp.com/advisory/ntap-20230725-0005/
• https://security.netapp.com/advisory/ntap-20230725-0003/
• https://security.netapp.com/advisory/ntap-20230725-0004/
• https://security.netapp.com/advisory/ntap-20230725-0001/

---

Vulnerability Identifier

• CVE-2020-23064
• CVE-2022-4899
• CVE-2023-0361
• CVE-2023-2975
• CVE-2023-20867
• CVE-2023-21950
• CVE-2023-22005
• CVE-2023-22006
• CVE-2023-22007
• CVE-2023-22008
• CVE-2023-22033
• CVE-2023-22036
• CVE-2023-22038
• CVE-2023-22041
• CVE-2023-22043
• CVE-2023-22044
• CVE-2023-22045
• CVE-2023-22046
• CVE-2023-22048
• CVE-2023-22049
• CVE-2023-22053
• CVE-2023-22054
• CVE-2023-22056
• CVE-2023-22057
• CVE-2023-22058
• CVE-2023-25193
• CVE-2023-36617

---

Source

• NetApp

---

Related Link

• https://security.netapp.com/advisory/ntap-20230725-0006/
• https://security.netapp.com/advisory/ntap-20230725-0002/
• https://security.netapp.com/advisory/ntap-20230725-0005/
• https://security.netapp.com/advisory/ntap-20230725-0003/
• https://security.netapp.com/advisory/ntap-20230725-0004/
• https://security.netapp.com/advisory/ntap-20230725-0001/