Netapp: >> All Flash Fabric-Attached Storage A400 Firmware Security Vulnerabilities
ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronization via a server mode packet with a spoofed source IP address, because transmissions are rescheduled even when a packet lacks a valid origin timestamp.
CVSS Score
5.9
EPSS Score
0.006
Published
2020-04-17
NetApp FAS 8300/8700 and AFF A400 Baseboard Management Controller (BMC) firmware versions 13.x prior to 13.1P1 were shipped with a default account enabled that could allow unauthorized arbitrary command execution via local access.
CVSS Score
7.8
EPSS Score
0.002
Published
2020-02-26