[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fVPum_AQTgM8yTQnWIQgdsL-i1ZtBNyDp7ME5JS36rlM":3,"g5a-family:netapp\u002Fh610s_firmware":119,"g5a-ex:netapp\u002Fh610s_firmware@*":120},{"success":4,"data":5},true,{"product":6,"versions":15,"topVulnerabilitiesByEpss":16,"kevVulnerabilities":77,"seoMetadata":97,"meta":116},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":14},"netapp","h610s_firmware",0,55,3,"2024-09-03",[],"H610s Firmware by Netapp is a technology product and 55 known security vulnerabilities including 3 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[17,26,32,37,42,47,54,59,66,71],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":25},"CVE-2022-2068","In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze).","2022-06-21",7.3,"v3.1","High",false,0.96391,{"cveId":27,"description":28,"publishedDate":29,"cvssScore":30,"cvssVersion":22,"severity":23,"isKev":4,"epssScore":31},"CVE-2021-22555","A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net\u002Fnetfilter\u002Fx_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space","2021-07-07",7.8,0.78684,{"cveId":33,"description":34,"publishedDate":35,"cvssScore":30,"cvssVersion":22,"severity":23,"isKev":4,"epssScore":36},"CVE-2019-2215","A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095","2019-10-11",0.72105,{"cveId":38,"description":39,"publishedDate":12,"cvssScore":40,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":41},"CVE-2024-6119","Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",7.5,0.66582,{"cveId":43,"description":44,"publishedDate":45,"cvssScore":30,"cvssVersion":22,"severity":23,"isKev":4,"epssScore":46},"CVE-2019-13272","In the Linux kernel before 5.1.17, ptrace_link in kernel\u002Fptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtain root access by leveraging certain scenarios with a parent-child process relationship, where a parent drops privileges and calls execve (potentially allowing control by an attacker). One contributing factor is an object lifetime issue (which can also cause a panic). Another contributing factor is incorrect marking of a ptrace relationship as privileged, which is exploitable through (for example) Polkit's pkexec helper with PTRACE_TRACEME. NOTE: SELinux deny_ptrace might be a usable workaround in some environments.","2019-07-17",0.52199,{"cveId":48,"description":49,"publishedDate":50,"cvssScore":51,"cvssVersion":22,"severity":52,"isKev":24,"epssScore":53},"CVE-2019-5108","An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could exploit this vulnerability by triggering AP to send IAPP location updates for stations before the required authentication process has completed. This could lead to different denial-of-service scenarios, either by causing CAM table attacks, or by leading to traffic flapping if faking already existing clients in other nearby APs of the same wireless infrastructure. An attacker can forge Authentication and Association Request packets to trigger this vulnerability.","2019-12-23",6.5,"Medium",0.10114,{"cveId":55,"description":56,"publishedDate":57,"cvssScore":30,"cvssVersion":22,"severity":23,"isKev":4,"epssScore":58},"CVE-2022-0995","An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.","2022-03-25",0.08859,{"cveId":60,"description":61,"publishedDate":62,"cvssScore":63,"cvssVersion":22,"severity":64,"isKev":24,"epssScore":65},"CVE-2019-10126","A flaw was found in the Linux kernel. A heap based buffer overflow in mwifiex_uap_parse_tail_ies function in drivers\u002Fnet\u002Fwireless\u002Fmarvell\u002Fmwifiex\u002Fie.c might lead to memory corruption and possibly other consequences.","2019-06-14",9.8,"Critical",0.06821,{"cveId":67,"description":68,"publishedDate":69,"cvssScore":30,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":70},"CVE-2020-8835","In the Linux kernel 5.5.0 and newer, the bpf verifier (kernel\u002Fbpf\u002Fverifier.c) did not properly restrict the register bounds for 32-bit operations, leading to out-of-bounds reads and writes in kernel memory. The vulnerability also affects the Linux 5.4 stable series, starting with v5.4.7, as the introducing commit was backported to that branch. This vulnerability was fixed in 5.6.1, 5.5.14, and 5.4.29. (issue is aka ZDI-CAN-10780)","2020-04-02",0.0601,{"cveId":72,"description":73,"publishedDate":74,"cvssScore":75,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":76},"CVE-2019-3846","A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network.","2019-06-03",8.8,0.05877,[78,83,88,93],{"cveId":55,"description":56,"publishedDate":57,"cvssScore":30,"severity":23,"isKev":4,"epssScore":58,"cisaVulnName":79,"cisaDateAdded":80,"cisaShortDescription":81,"cisaRequiredAction":82},"Linux Kernel Out-of-Bounds Write Vulnerability","2026-08-26","Linux Kernel contains an out-of-bounds memory write vulnerability which could allow a local user to gain privileged access or cause a denial of service on the system.","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",{"cveId":27,"description":28,"publishedDate":29,"cvssScore":30,"severity":23,"isKev":4,"epssScore":31,"cisaVulnName":84,"cisaDateAdded":85,"cisaShortDescription":86,"cisaRequiredAction":87},"Linux Kernel Heap Out-of-Bounds Write Vulnerability","2025-10-06","Linux Kernel contains a heap out-of-bounds write vulnerability that could allow an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":43,"description":44,"publishedDate":45,"cvssScore":30,"severity":23,"isKev":4,"epssScore":46,"cisaVulnName":89,"cisaDateAdded":90,"cisaShortDescription":91,"cisaRequiredAction":92},"Linux Kernel Improper Privilege Management Vulnerability","2021-12-10","Kernel\u002Fptrace.c in Linux kernel mishandles contains an improper privilege management vulnerability that allows local users to obtain root access.","Apply updates per vendor instructions.",{"cveId":33,"description":34,"publishedDate":35,"cvssScore":30,"severity":23,"isKev":4,"epssScore":36,"cisaVulnName":94,"cisaDateAdded":95,"cisaShortDescription":96,"cisaRequiredAction":92},"Android Kernel Use-After-Free Vulnerability","2021-11-03","Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux Kernel. This vulnerability was observed chained with CVE-2020-0041 and CVE-2020-0069 under exploit chain \"AbstractEmu.\"",{"title":98,"metaDescription":99,"keywords":100,"structuredData":101},"H610s Firmware by Netapp - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for H610s Firmware by Netapp with 55 tracked vulnerabilities including 0 critical and 4 high-severity issues and 3 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","H610s Firmware vulnerabilities, H610s Firmware security, H610s Firmware CVE, Netapp H610s Firmware, H610s Firmware threat intelligence, Netapp security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, H610s Firmware KEV, H610s Firmware exploited vulnerabilities",{"@context":102,"@type":103,"name":104,"description":99,"url":105,"manufacturer":106,"applicationCategory":110,"softwareVersion":111,"mainEntity":112},"https:\u002F\u002Fschema.org","SoftwareApplication","H610s Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fnetapp\u002Fh610s_firmware",{"@type":107,"name":108,"url":109},"Organization","Netapp","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fnetapp","Security Software","Multiple versions",{"@type":113,"name":114,"description":115,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","H610s Firmware Security Vulnerabilities","Security vulnerabilities affecting H610s Firmware by Netapp",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":117,"apiVersion":118},"2026-10-17T17:06:19.946Z","3.0",[],{"rows":121,"total":138,"capped":24,"failed":9},[122,126,130,134],{"cveId":55,"name":79,"severity":23,"cvss":30,"added":80,"epss":58,"published":123,"ranges":124,"checked":4,"hits":125,"covers":24},"2022-03-25T19:15:10.52",[],[],{"cveId":27,"name":84,"severity":23,"cvss":30,"added":85,"epss":31,"published":127,"ranges":128,"checked":4,"hits":129,"covers":24},"2021-07-07T12:15:08.453",[],[],{"cveId":43,"name":89,"severity":23,"cvss":30,"added":90,"epss":46,"published":131,"ranges":132,"checked":4,"hits":133,"covers":24},"2019-07-17T13:15:10.687",[],[],{"cveId":33,"name":94,"severity":23,"cvss":30,"added":95,"epss":36,"published":135,"ranges":136,"checked":4,"hits":137,"covers":24},"2019-10-11T19:15:10.947",[],[],4]