[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fvNDbWVdjgsoHIobDzbPv7aLgFUZXa2_CYGGMhFFeCag":3,"g5a-family:netapp\u002Fsolidfire_baseboard_management_controller_firmware":108,"g5a-ex:netapp\u002Fsolidfire_baseboard_management_controller_firmware@*":109},{"success":4,"data":5},true,{"product":6,"versions":15,"topVulnerabilitiesByEpss":16,"kevVulnerabilities":80,"seoMetadata":86,"meta":105},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":14},"netapp","solidfire_baseboard_management_controller_firmware",0,70,1,"2021-10-11",[],"Solidfire Baseboard Management Controller Firmware by Netapp is a technology product and 70 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[17,25,32,39,45,52,58,65,70,75],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":4,"epssScore":24},"CVE-2019-2215","A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095","2019-10-11",7.8,"v3.1","High",0.72105,{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":22,"severity":23,"isKev":30,"epssScore":31},"CVE-2021-22901","curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over a connection. A malicious server can use this in rare unfortunate circumstances to potentially reach remote code execution in the client. When libcurl at run-time sets up support for TLS 1.3 session tickets on a connection using OpenSSL, it stores pointers to the transfer in-memory object for later retrieval when a session ticket arrives. If the connection is used by multiple transfers (like with a reused HTTP\u002F1.1 connection or multiplexed HTTP\u002F2 connection) that first transfer object might be freed before the new session is established on that connection and then the function will access a memory buffer that might be freed. When using that memory, libcurl might even call a function pointer in the object, making it possible for a remote code execution if the server could somehow manage to get crafted memory content into the correct place in memory.","2021-06-11",8.1,false,0.63531,{"cveId":33,"description":34,"publishedDate":35,"cvssScore":36,"cvssVersion":22,"severity":37,"isKev":30,"epssScore":38},"CVE-2019-5481","Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.","2019-09-16",9.8,"Critical",0.07465,{"cveId":40,"description":41,"publishedDate":42,"cvssScore":43,"cvssVersion":22,"severity":37,"isKev":30,"epssScore":44},"CVE-2021-22945","When sending data to an MQTT server, libcurl \u003C= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call to send data and also free it *again*.","2021-09-23",9.1,0.06677,{"cveId":46,"description":47,"publishedDate":48,"cvssScore":49,"cvssVersion":22,"severity":50,"isKev":30,"epssScore":51},"CVE-2021-22924","libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching function did not take 'issuercert' into account and it compared the involved paths *case insensitively*,which could lead to libcurl reusing wrong connections.File paths are, or can be, case sensitive on many systems but not all, and caneven vary depending on used file systems.The comparison also didn't include the 'issuer cert' which a transfer can setto qualify how to verify the server certificate.","2021-08-05",3.7,"Low",0.0627,{"cveId":53,"description":54,"publishedDate":55,"cvssScore":56,"cvssVersion":22,"severity":23,"isKev":30,"epssScore":57},"CVE-2019-19052","A memory leak in the gs_can_open() function in drivers\u002Fnet\u002Fcan\u002Fusb\u002Fgs_usb.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures, aka CID-fb5be6a7b486.","2019-11-18",7.5,0.05232,{"cveId":59,"description":60,"publishedDate":61,"cvssScore":62,"cvssVersion":22,"severity":63,"isKev":30,"epssScore":64},"CVE-2020-13143","gadget_dev_desc_UDC_store in drivers\u002Fusb\u002Fgadget\u002Fconfigfs.c in the Linux kernel 3.16 through 5.6.13 relies on kstrdup without considering the possibility of an internal '\\0' value, which allows attackers to trigger an out-of-bounds read, aka CID-15753588bcd4.","2020-05-18",6.5,"Medium",0.05193,{"cveId":66,"description":67,"publishedDate":68,"cvssScore":29,"cvssVersion":22,"severity":23,"isKev":30,"epssScore":69},"CVE-2020-14305","An out-of-bounds memory write flaw was found in how the Linux kernel’s Voice Over IP H.323 connection tracking functionality handled connections on ipv6 port 1720. This flaw allows an unauthenticated remote user to crash the system, causing a denial of service. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.","2020-12-02",0.05152,{"cveId":71,"description":72,"publishedDate":73,"cvssScore":56,"cvssVersion":22,"severity":23,"isKev":30,"epssScore":74},"CVE-2021-22946","A user can tell curl >= 7.20.0 and \u003C= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL` or `CURLUSESSL_ALL` withlibcurl). This requirement could be bypassed if the server would return a properly crafted but perfectly legitimate response.This flaw would then make curl silently continue its operations **withoutTLS** contrary to the instructions and expectations, exposing possibly sensitive data in clear text over the network.","2021-09-29",0.04539,{"cveId":76,"description":77,"publishedDate":28,"cvssScore":78,"cvssVersion":22,"severity":63,"isKev":30,"epssScore":79},"CVE-2021-22897","curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST when libcurl is built to use the Schannel TLS library. The selected cipher set was stored in a single \"static\" variable in the library, which has the surprising side-effect that if an application sets up multiple concurrent transfers, the last one that sets the ciphers will accidentally control the set used by all transfers. In a worst-case scenario, this weakens transport security significantly.",5.3,0.04265,[81],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"severity":23,"isKev":4,"epssScore":24,"cisaVulnName":82,"cisaDateAdded":83,"cisaShortDescription":84,"cisaRequiredAction":85},"Android Kernel Use-After-Free Vulnerability","2021-11-03","Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux Kernel. This vulnerability was observed chained with CVE-2020-0041 and CVE-2020-0069 under exploit chain \"AbstractEmu.\"","Apply updates per vendor instructions.",{"title":87,"metaDescription":88,"keywords":89,"structuredData":90},"Solidfire Baseboard Management Controller Firmware by Netapp - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Solidfire Baseboard Management Controller Firmware by Netapp with 70 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Solidfire Baseboard Management Controller Firmware vulnerabilities, Solidfire Baseboard Management Controller Firmware security, Solidfire Baseboard Management Controller Firmware CVE, Netapp Solidfire Baseboard Management Controller Firmware, Solidfire Baseboard Management Controller Firmware threat intelligence, Netapp security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Solidfire Baseboard Management Controller Firmware KEV, Solidfire Baseboard Management Controller Firmware exploited vulnerabilities",{"@context":91,"@type":92,"name":93,"description":88,"url":94,"manufacturer":95,"applicationCategory":99,"softwareVersion":100,"mainEntity":101},"https:\u002F\u002Fschema.org","SoftwareApplication","Solidfire Baseboard Management Controller Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fnetapp\u002Fsolidfire_baseboard_management_controller_firmware",{"@type":96,"name":97,"url":98},"Organization","Netapp","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fnetapp","Security Software","Multiple versions",{"@type":102,"name":103,"description":104,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Solidfire Baseboard Management Controller Firmware Security Vulnerabilities","Security vulnerabilities affecting Solidfire Baseboard Management Controller Firmware by Netapp",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":106,"apiVersion":107},"2026-10-17T15:13:14.470Z","3.0",[],{"rows":110,"total":11,"capped":30,"failed":9},[111],{"cveId":18,"name":82,"severity":23,"cvss":21,"added":83,"epss":24,"published":112,"ranges":113,"checked":4,"hits":114,"covers":30},"2019-10-11T19:15:10.947",[],[]]