[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fgF3acEEV0x-GHHdfzmD4OewDRKaTSM4hNlk8H3npacg":3,"g5a-family:netapp\u002Fh615c_firmware":108,"g5a-ex:netapp\u002Fh615c_firmware@*":109},{"success":4,"data":5},true,{"product":6,"versions":15,"topVulnerabilitiesByEpss":16,"kevVulnerabilities":75,"seoMetadata":86,"meta":105},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":14},"netapp","h615c_firmware",0,29,1,"2024-09-03",[],"H615c Firmware by Netapp is a technology product and 29 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[17,26,32,37,42,47,54,59,64,69],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":25},"CVE-2022-2068","In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze).","2022-06-21",7.3,"v3.1","High",false,0.96391,{"cveId":27,"description":28,"publishedDate":29,"cvssScore":30,"cvssVersion":22,"severity":23,"isKev":4,"epssScore":31},"CVE-2021-22555","A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net\u002Fnetfilter\u002Fx_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space","2021-07-07",7.8,0.78684,{"cveId":33,"description":34,"publishedDate":12,"cvssScore":35,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":36},"CVE-2024-6119","Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",7.5,0.66582,{"cveId":38,"description":39,"publishedDate":40,"cvssScore":30,"cvssVersion":22,"severity":23,"isKev":4,"epssScore":41},"CVE-2022-0995","An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.","2022-03-25",0.08859,{"cveId":43,"description":44,"publishedDate":45,"cvssScore":30,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":46},"CVE-2020-8835","In the Linux kernel 5.5.0 and newer, the bpf verifier (kernel\u002Fbpf\u002Fverifier.c) did not properly restrict the register bounds for 32-bit operations, leading to out-of-bounds reads and writes in kernel memory. The vulnerability also affects the Linux 5.4 stable series, starting with v5.4.7, as the introducing commit was backported to that branch. This vulnerability was fixed in 5.6.1, 5.5.14, and 5.4.29. (issue is aka ZDI-CAN-10780)","2020-04-02",0.0601,{"cveId":48,"description":49,"publishedDate":50,"cvssScore":51,"cvssVersion":22,"severity":52,"isKev":24,"epssScore":53},"CVE-2020-13143","gadget_dev_desc_UDC_store in drivers\u002Fusb\u002Fgadget\u002Fconfigfs.c in the Linux kernel 3.16 through 5.6.13 relies on kstrdup without considering the possibility of an internal '\\0' value, which allows attackers to trigger an out-of-bounds read, aka CID-15753588bcd4.","2020-05-18",6.5,"Medium",0.05193,{"cveId":55,"description":56,"publishedDate":57,"cvssScore":35,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":58},"CVE-2021-45485","In the IPv6 implementation in the Linux kernel before 5.13.3, net\u002Fipv6\u002Foutput_core.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that IPv6-based attackers can typically choose among many IPv6 source addresses.","2021-12-25",0.03615,{"cveId":60,"description":61,"publishedDate":62,"cvssScore":51,"cvssVersion":22,"severity":52,"isKev":24,"epssScore":63},"CVE-2021-3772","A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP association through invalid chunks if the attacker knows the IP-addresses and port numbers being used and the attacker can send packets with spoofed IP addresses.","2022-03-02",0.0124,{"cveId":65,"description":66,"publishedDate":67,"cvssScore":35,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":68},"CVE-2024-26461","Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in \u002Fkrb5\u002Fsrc\u002Flib\u002Fgssapi\u002Fkrb5\u002Fk5sealv3.c.","2024-02-29",0.01128,{"cveId":70,"description":71,"publishedDate":72,"cvssScore":73,"cvssVersion":22,"severity":52,"isKev":24,"epssScore":74},"CVE-2020-15436","Use-after-free vulnerability in fs\u002Fblock_dev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging improper access to a certain error field.","2020-11-23",6.7,0.00928,[76,81],{"cveId":38,"description":39,"publishedDate":40,"cvssScore":30,"severity":23,"isKev":4,"epssScore":41,"cisaVulnName":77,"cisaDateAdded":78,"cisaShortDescription":79,"cisaRequiredAction":80},"Linux Kernel Out-of-Bounds Write Vulnerability","2026-08-26","Linux Kernel contains an out-of-bounds memory write vulnerability which could allow a local user to gain privileged access or cause a denial of service on the system.","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",{"cveId":27,"description":28,"publishedDate":29,"cvssScore":30,"severity":23,"isKev":4,"epssScore":31,"cisaVulnName":82,"cisaDateAdded":83,"cisaShortDescription":84,"cisaRequiredAction":85},"Linux Kernel Heap Out-of-Bounds Write Vulnerability","2025-10-06","Linux Kernel contains a heap out-of-bounds write vulnerability that could allow an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"title":87,"metaDescription":88,"keywords":89,"structuredData":90},"H615c Firmware by Netapp - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for H615c Firmware by Netapp with 29 tracked vulnerabilities including 0 critical and 2 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","H615c Firmware vulnerabilities, H615c Firmware security, H615c Firmware CVE, Netapp H615c Firmware, H615c Firmware threat intelligence, Netapp security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, H615c Firmware KEV, H615c Firmware exploited vulnerabilities",{"@context":91,"@type":92,"name":93,"description":88,"url":94,"manufacturer":95,"applicationCategory":99,"softwareVersion":100,"mainEntity":101},"https:\u002F\u002Fschema.org","SoftwareApplication","H615c Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fnetapp\u002Fh615c_firmware",{"@type":96,"name":97,"url":98},"Organization","Netapp","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fnetapp","Security Software","Multiple versions",{"@type":102,"name":103,"description":104,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","H615c Firmware Security Vulnerabilities","Security vulnerabilities affecting H615c Firmware by Netapp",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":106,"apiVersion":107},"2026-10-18T16:41:34.113Z","3.0",[],{"rows":110,"total":119,"capped":24,"failed":9},[111,115],{"cveId":38,"name":77,"severity":23,"cvss":30,"added":78,"epss":41,"published":112,"ranges":113,"checked":4,"hits":114,"covers":24},"2022-03-25T19:15:10.52",[],[],{"cveId":27,"name":82,"severity":23,"cvss":30,"added":83,"epss":31,"published":116,"ranges":117,"checked":4,"hits":118,"covers":24},"2021-07-07T12:15:08.453",[],[],2]