Remote Administration Access Vulnerability in SnapCenter by NetApp
CVE-2023-1096

9.8CRITICAL

Key Information:

Vendor

Netapp

Status
Snapcenter
Vendor
CVE Published:
12 May 2023

What is CVE-2023-1096?

SnapCenter versions 4.7 prior to 4.7P2 and 4.8 prior to 4.8P1 have a security vulnerability that permits an unauthenticated attacker to exploit the system, potentially granting them administrative access. This issue raises significant security concerns, allowing unauthorized users to manipulate system settings and data without detection. Organizations utilizing affected versions should prioritize applying relevant patches to safeguard against this exploit.

Affected Version(s)

SnapCenter 4.7 prior to 4.7P2 and 4.8 prior to 4.8P1

References

https://security.netapp.com/advisory/ntap-20230511-0011/

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.