[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fQAg2ut4Hw3blTKLctbccnKyVbjuQHvez4R9QMVD7JQw":3,"g5a-family:netapp\u002Fservice_processor":165,"g5a-ex:netapp\u002Fservice_processor@*":166},{"success":4,"data":5},true,{"product":6,"versions":54,"topVulnerabilitiesByEpss":73,"kevVulnerabilities":133,"seoMetadata":143,"meta":162},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":53},"netapp","service_processor",18,13,2,"2021-01-04",[14,19,21,23,25,27,29,31,33,35,37,39,41,43,45,47,49,51],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"2.2.5",1,0,false,{"version":20,"cve_count":16,"kev_count":17,"has_kev":18},"2.3.2",{"version":22,"cve_count":16,"kev_count":17,"has_kev":18},"2.4",{"version":24,"cve_count":16,"kev_count":17,"has_kev":18},"2.4.1",{"version":26,"cve_count":16,"kev_count":17,"has_kev":18},"2.5",{"version":28,"cve_count":16,"kev_count":17,"has_kev":18},"2.8",{"version":30,"cve_count":16,"kev_count":17,"has_kev":18},"3.0.4",{"version":32,"cve_count":16,"kev_count":17,"has_kev":18},"3.1.2",{"version":34,"cve_count":16,"kev_count":17,"has_kev":18},"3.2",{"version":36,"cve_count":16,"kev_count":17,"has_kev":18},"3.3",{"version":38,"cve_count":16,"kev_count":17,"has_kev":18},"3.4",{"version":40,"cve_count":16,"kev_count":17,"has_kev":18},"3.7",{"version":42,"cve_count":16,"kev_count":17,"has_kev":18},"4.1",{"version":44,"cve_count":16,"kev_count":17,"has_kev":18},"4.2",{"version":46,"cve_count":16,"kev_count":17,"has_kev":18},"4.5",{"version":48,"cve_count":16,"kev_count":17,"has_kev":18},"5.1",{"version":50,"cve_count":16,"kev_count":17,"has_kev":18},"5.2",{"version":52,"cve_count":16,"kev_count":17,"has_kev":18},"5.5","Service Processor by Netapp is a technology product with 18 tracked versions and 13 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":16,"kev_count":17,"has_kev":18},{"version":22,"cve_count":16,"kev_count":17,"has_kev":18},{"version":24,"cve_count":16,"kev_count":17,"has_kev":18},{"version":26,"cve_count":16,"kev_count":17,"has_kev":18},{"version":28,"cve_count":16,"kev_count":17,"has_kev":18},{"version":30,"cve_count":16,"kev_count":17,"has_kev":18},{"version":32,"cve_count":16,"kev_count":17,"has_kev":18},{"version":34,"cve_count":16,"kev_count":17,"has_kev":18},{"version":36,"cve_count":16,"kev_count":17,"has_kev":18},{"version":38,"cve_count":16,"kev_count":17,"has_kev":18},{"version":40,"cve_count":16,"kev_count":17,"has_kev":18},{"version":42,"cve_count":16,"kev_count":17,"has_kev":18},{"version":44,"cve_count":16,"kev_count":17,"has_kev":18},{"version":46,"cve_count":16,"kev_count":17,"has_kev":18},{"version":48,"cve_count":16,"kev_count":17,"has_kev":18},{"version":50,"cve_count":16,"kev_count":17,"has_kev":18},{"version":52,"cve_count":16,"kev_count":17,"has_kev":18},[74,82,89,94,100,106,112,116,121,128],{"cveId":75,"description":76,"publishedDate":77,"cvssScore":78,"cvssVersion":79,"severity":80,"isKev":18,"epssScore":81},"CVE-2018-15473","OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.","2018-08-17",5.3,"v3.1","Medium",0.98631,{"cveId":83,"description":84,"publishedDate":85,"cvssScore":86,"cvssVersion":79,"severity":87,"isKev":4,"epssScore":88},"CVE-2019-2215","A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095","2019-10-11",7.8,"High",0.72105,{"cveId":90,"description":91,"publishedDate":92,"cvssScore":86,"cvssVersion":79,"severity":87,"isKev":4,"epssScore":93},"CVE-2019-13272","In the Linux kernel before 5.1.17, ptrace_link in kernel\u002Fptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtain root access by leveraging certain scenarios with a parent-child process relationship, where a parent drops privileges and calls execve (potentially allowing control by an attacker). One contributing factor is an object lifetime issue (which can also cause a panic). Another contributing factor is incorrect marking of a ptrace relationship as privileged, which is exploitable through (for example) Polkit's pkexec helper with PTRACE_TRACEME. NOTE: SELinux deny_ptrace might be a usable workaround in some environments.","2019-07-17",0.52199,{"cveId":95,"description":96,"publishedDate":97,"cvssScore":98,"cvssVersion":79,"severity":87,"isKev":18,"epssScore":99},"CVE-2016-8610","A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS\u002FSSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS\u002FSSL server consume an excessive amount of CPU and fail to accept connections from other clients.","2017-11-13",7.5,0.39657,{"cveId":101,"description":102,"publishedDate":103,"cvssScore":104,"cvssVersion":79,"severity":80,"isKev":18,"epssScore":105},"CVE-2019-1559","If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable \"non-stitched\" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).","2019-02-27",5.9,0.17139,{"cveId":107,"description":108,"publishedDate":109,"cvssScore":98,"cvssVersion":110,"severity":87,"isKev":18,"epssScore":111},"CVE-2016-10708","sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYS message, as demonstrated by Honggfuzz, related to kex.c and packet.c.","2018-01-21","v3.0",0.15716,{"cveId":113,"description":114,"publishedDate":12,"cvssScore":104,"cvssVersion":79,"severity":80,"isKev":18,"epssScore":115},"CVE-2019-25013","The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read.",0.03565,{"cveId":117,"description":118,"publishedDate":119,"cvssScore":98,"cvssVersion":79,"severity":87,"isKev":18,"epssScore":120},"CVE-2019-16995","In the Linux kernel before 5.0.3, a memory leak exits in hsr_dev_finalize() in net\u002Fhsr\u002Fhsr_device.c if hsr_add_port fails to add a port, which may cause denial of service, aka CID-6caabe7f197d.","2019-09-30",0.03529,{"cveId":122,"description":123,"publishedDate":124,"cvssScore":125,"cvssVersion":110,"severity":126,"isKev":18,"epssScore":127},"CVE-2019-5490","Certain versions between 2.x to 5.x (refer to advisory) of the NetApp Service Processor firmware were shipped with a default account enabled that could allow unauthorized arbitrary command execution. Any platform listed in the advisory Impact section may be affected and should be upgraded to a fixed version of Service Processor firmware IMMEDIATELY.","2019-03-21",9.8,"Critical",0.03493,{"cveId":129,"description":130,"publishedDate":131,"cvssScore":86,"cvssVersion":79,"severity":87,"isKev":18,"epssScore":132},"CVE-2019-14816","There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.","2019-09-20",0.00909,[134,139],{"cveId":90,"description":91,"publishedDate":92,"cvssScore":86,"severity":87,"isKev":4,"epssScore":93,"cisaVulnName":135,"cisaDateAdded":136,"cisaShortDescription":137,"cisaRequiredAction":138},"Linux Kernel Improper Privilege Management Vulnerability","2021-12-10","Kernel\u002Fptrace.c in Linux kernel mishandles contains an improper privilege management vulnerability that allows local users to obtain root access.","Apply updates per vendor instructions.",{"cveId":83,"description":84,"publishedDate":85,"cvssScore":86,"severity":87,"isKev":4,"epssScore":88,"cisaVulnName":140,"cisaDateAdded":141,"cisaShortDescription":142,"cisaRequiredAction":138},"Android Kernel Use-After-Free Vulnerability","2021-11-03","Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux Kernel. This vulnerability was observed chained with CVE-2020-0041 and CVE-2020-0069 under exploit chain \"AbstractEmu.\"",{"title":144,"metaDescription":145,"keywords":146,"structuredData":147},"Service Processor by Netapp - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Service Processor by Netapp covering 18 versions with 13 tracked vulnerabilities including 0 critical and 2 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Service Processor vulnerabilities, Service Processor security, Service Processor CVE, Netapp Service Processor, Service Processor threat intelligence, Netapp security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Service Processor KEV, Service Processor exploited vulnerabilities",{"@context":148,"@type":149,"name":150,"description":145,"url":151,"manufacturer":152,"applicationCategory":156,"softwareVersion":157,"mainEntity":158},"https:\u002F\u002Fschema.org","SoftwareApplication","Service Processor","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fnetapp\u002Fservice_processor",{"@type":153,"name":154,"url":155},"Organization","Netapp","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fnetapp","Security Software","18 versions tracked",{"@type":159,"name":160,"description":161,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Service Processor Security Vulnerabilities","Security vulnerabilities affecting Service Processor by Netapp",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":163,"apiVersion":164},"2026-10-17T19:08:34.285Z","3.0",[],{"rows":167,"total":11,"capped":18,"failed":17},[168,172],{"cveId":90,"name":135,"severity":87,"cvss":86,"added":136,"epss":93,"published":169,"ranges":170,"checked":4,"hits":171,"covers":18},"2019-07-17T13:15:10.687",[],[],{"cveId":83,"name":140,"severity":87,"cvss":86,"added":141,"epss":88,"published":173,"ranges":174,"checked":4,"hits":175,"covers":18},"2019-10-11T19:15:10.947",[],[]]