CVE-2019-5497
9.8
CRITICAL · CVSS 3.0 · EPSS 2.9% (pctl 86)
In your normal cycle
Critical by CVSS (9.8), but no sign of active exploitation.
Description
NetApp AFF A700s Baseboard Management Controller (BMC) firmware versions 1.22 and higher were shipped with a default account enabled that could allow unauthorized arbitrary command execution.
Scoring
| CVSS | 9.8 (CRITICAL, v3.0) |
|---|---|
| Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 2.87% — more likely to be exploited than 86% of all CVEs |
| Weakness | CWE-1188 |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2019-07-01 |
| Last modified | 2026-06-17 |
Affected (3)
| Vendor | Product |
|---|---|
| netapp | aff a700s |
| netapp | aff a700s firmware |
| netapp | clustered data ontap |
References
→ the Explorer · watch your stack · NVD