[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fZBeJzpLJDH3E5ug3ECFIr9ftBA1PiFQHl7loLWDGKgw":3,"g5a-family:netapp\u002Fc250_firmware":72,"g5a-ex:netapp\u002Fc250_firmware@*":73},{"success":4,"data":5},true,{"product":6,"versions":15,"topVulnerabilitiesByEpss":16,"kevVulnerabilities":44,"seoMetadata":50,"meta":69},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":14},"netapp","c250_firmware",0,4,1,"2024-09-03",[],"C250 Firmware by Netapp is a technology product and 4 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[17,26,33,38],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":25},"CVE-2024-6387","A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.","2024-07-01",8.1,"v3.1","High",false,0.99506,{"cveId":27,"description":28,"publishedDate":29,"cvssScore":30,"cvssVersion":22,"severity":31,"isKev":24,"epssScore":32},"CVE-2023-25136","OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling. This is fixed in OpenSSH 9.2. The double free can be leveraged, by an unauthenticated remote attacker in the default configuration, to jump to any location in the sshd address space. One third-party report states \"remote code execution is theoretically possible.\"","2023-02-03",6.5,"Medium",0.89685,{"cveId":34,"description":35,"publishedDate":12,"cvssScore":36,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":37},"CVE-2024-6119","Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",7.5,0.66582,{"cveId":39,"description":40,"publishedDate":41,"cvssScore":42,"cvssVersion":22,"severity":23,"isKev":4,"epssScore":43},"CVE-2024-1086","A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.\n\n\n\nThe nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT.\n\n\n\nWe recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.","2024-01-31",7.8,0.28058,[45],{"cveId":39,"description":40,"publishedDate":41,"cvssScore":42,"severity":23,"isKev":4,"epssScore":43,"cisaVulnName":46,"cisaDateAdded":47,"cisaShortDescription":48,"cisaRequiredAction":49},"Linux Kernel Use-After-Free Vulnerability","2024-05-30","Linux kernel contains a use-after-free vulnerability in the netfilter: nf_tables component that allows an attacker to achieve local privilege escalation.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"title":51,"metaDescription":52,"keywords":53,"structuredData":54},"C250 Firmware by Netapp - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for C250 Firmware by Netapp with 4 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","C250 Firmware vulnerabilities, C250 Firmware security, C250 Firmware CVE, Netapp C250 Firmware, C250 Firmware threat intelligence, Netapp security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, C250 Firmware KEV, C250 Firmware exploited vulnerabilities",{"@context":55,"@type":56,"name":57,"description":52,"url":58,"manufacturer":59,"applicationCategory":63,"softwareVersion":64,"mainEntity":65},"https:\u002F\u002Fschema.org","SoftwareApplication","C250 Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fnetapp\u002Fc250_firmware",{"@type":60,"name":61,"url":62},"Organization","Netapp","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fnetapp","Security Software","Multiple versions",{"@type":66,"name":67,"description":68,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","C250 Firmware Security Vulnerabilities","Security vulnerabilities affecting C250 Firmware by Netapp",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":70,"apiVersion":71},"2026-10-18T17:27:33.443Z","3.0",[],{"rows":74,"total":11,"capped":24,"failed":9},[75],{"cveId":39,"name":46,"severity":23,"cvss":42,"added":47,"epss":43,"published":76,"ranges":77,"checked":4,"hits":78,"covers":24},"2024-01-31T13:15:10.827",[],[]]