[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fhO9uJDycOdcYIqNA7nrwKCHVr2yoi_SCEmrXMgEWIg8":3,"g5a-ex:netapp\u002Fa700s@*":101,"g5a-family:netapp\u002Fa700s":103},{"success":4,"data":5},true,{"product":6,"versions":14,"topVulnerabilitiesByEpss":15,"kevVulnerabilities":78,"seoMetadata":79,"meta":98},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":13},"netapp","a700s",0,32,"2024-07-01",[],"A700s by Netapp is a technology product and 32 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[16,24,30,36,43,50,56,62,67,72],{"cveId":17,"description":18,"publishedDate":11,"cvssScore":19,"cvssVersion":20,"severity":21,"isKev":22,"epssScore":23},"CVE-2024-6387","A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.",8.1,"v3.1","High",false,0.99506,{"cveId":25,"description":26,"publishedDate":27,"cvssScore":28,"cvssVersion":20,"severity":21,"isKev":22,"epssScore":29},"CVE-2022-1292","The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).","2022-05-03",7.3,0.82612,{"cveId":31,"description":32,"publishedDate":33,"cvssScore":34,"cvssVersion":20,"severity":21,"isKev":22,"epssScore":35},"CVE-2020-15778","scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of \"anomalous argument transfers\" because that could \"stand a great chance of breaking existing workflows.\"","2020-07-24",7.4,0.13675,{"cveId":37,"description":38,"publishedDate":39,"cvssScore":40,"cvssVersion":20,"severity":41,"isKev":22,"epssScore":42},"CVE-2019-5108","An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could exploit this vulnerability by triggering AP to send IAPP location updates for stations before the required authentication process has completed. This could lead to different denial-of-service scenarios, either by causing CAM table attacks, or by leading to traffic flapping if faking already existing clients in other nearby APs of the same wireless infrastructure. An attacker can forge Authentication and Association Request packets to trigger this vulnerability.","2019-12-23",6.5,"Medium",0.10114,{"cveId":44,"description":45,"publishedDate":46,"cvssScore":47,"cvssVersion":20,"severity":48,"isKev":22,"epssScore":49},"CVE-2019-10126","A flaw was found in the Linux kernel. A heap based buffer overflow in mwifiex_uap_parse_tail_ies function in drivers\u002Fnet\u002Fwireless\u002Fmarvell\u002Fmwifiex\u002Fie.c might lead to memory corruption and possibly other consequences.","2019-06-14",9.8,"Critical",0.06821,{"cveId":51,"description":52,"publishedDate":53,"cvssScore":54,"cvssVersion":20,"severity":21,"isKev":22,"epssScore":55},"CVE-2020-8835","In the Linux kernel 5.5.0 and newer, the bpf verifier (kernel\u002Fbpf\u002Fverifier.c) did not properly restrict the register bounds for 32-bit operations, leading to out-of-bounds reads and writes in kernel memory. The vulnerability also affects the Linux 5.4 stable series, starting with v5.4.7, as the introducing commit was backported to that branch. This vulnerability was fixed in 5.6.1, 5.5.14, and 5.4.29. (issue is aka ZDI-CAN-10780)","2020-04-02",7.8,0.0601,{"cveId":57,"description":58,"publishedDate":59,"cvssScore":60,"cvssVersion":20,"severity":21,"isKev":22,"epssScore":61},"CVE-2019-3846","A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network.","2019-06-03",8.8,0.05877,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":40,"cvssVersion":20,"severity":41,"isKev":22,"epssScore":66},"CVE-2020-13143","gadget_dev_desc_UDC_store in drivers\u002Fusb\u002Fgadget\u002Fconfigfs.c in the Linux kernel 3.16 through 5.6.13 relies on kstrdup without considering the possibility of an internal '\\0' value, which allows attackers to trigger an out-of-bounds read, aka CID-15753588bcd4.","2020-05-18",0.05193,{"cveId":68,"description":69,"publishedDate":27,"cvssScore":70,"cvssVersion":20,"severity":21,"isKev":22,"epssScore":71},"CVE-2022-1473","The OPENSSL_LH_flush() function, which empties a hash table, contains a bug that breaks reuse of the memory occuppied by the removed hash table entries. This function is used when decoding certificates or keys. If a long lived process periodically decodes certificates or keys its memory usage will expand without bounds and the process might be terminated by the operating system causing a denial of service. Also traversing the empty hash table entries will take increasingly more time. Typically such long lived processes might be TLS clients or TLS servers configured to accept client certificate authentication. The function was added in the OpenSSL 3.0 version thus older releases are not affected by the issue. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2).",7.5,0.04583,{"cveId":73,"description":74,"publishedDate":75,"cvssScore":76,"cvssVersion":20,"severity":41,"isKev":22,"epssScore":77},"CVE-2019-18282","The flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CID-55667441c84f. This occurs because the auto flowlabel of a UDP IPv6 packet relies on a 32-bit hashrnd value as a secret, and because jhash (instead of siphash) is used. The hashrnd value remains the same starting from boot time, and can be inferred by an attacker. This affects net\u002Fcore\u002Fflow_dissector.c and related code.","2020-01-16",5.3,0.02605,[],{"title":80,"metaDescription":81,"keywords":82,"structuredData":83},"A700s by Netapp - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for A700s by Netapp with 32 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","A700s vulnerabilities, A700s security, A700s CVE, Netapp A700s, A700s threat intelligence, Netapp security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":84,"@type":85,"name":86,"description":81,"url":87,"manufacturer":88,"applicationCategory":92,"softwareVersion":93,"mainEntity":94},"https:\u002F\u002Fschema.org","SoftwareApplication","A700s","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fnetapp\u002Fa700s",{"@type":89,"name":90,"url":91},"Organization","Netapp","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fnetapp","Security Software","Multiple versions",{"@type":95,"name":96,"description":97,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","A700s Security Vulnerabilities","Security vulnerabilities affecting A700s by Netapp",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":99,"apiVersion":100},"2026-10-17T14:43:22.510Z","3.0",{"rows":102,"total":9,"capped":22,"failed":9},[],[104],{"product":105,"cves":10},"a700s_firmware"]