« Volver al listado

CVE-2020-8581

Estado: ModificadaMedia (6.5)—

Clustered Data ONTAP versions prior to 9.3P20 and 9.5 are susceptible to a vulnerability which could allow an authenticated but unauthorized attacker to overwrite arbitrary data when VMware vStorage support is enabled.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Netapp — Clustered Data Ontap

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-8581",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 3.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "security-alert@netapp.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "Clustered Data ONTAP",
          "versions": [
            {
              "status": "affected",
              "version": "Versions prior to 9.3P20 and 9.5"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-01-19T18:15:12.950",
  "references": [
    {
      "url": "https://security.netapp.com/advisory/ntap-20210119-0001/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security-alert@netapp.com"
    },
    {
      "url": "https://security.netapp.com/advisory/ntap-20210119-0001/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Clustered Data ONTAP versions prior to 9.3P20 and 9.5 are susceptible to a vulnerability which could allow an authenticated but unauthorized attacker to overwrite arbitrary data when VMware vStorage support is enabled."
    },
    {
      "lang": "es",
      "value": "Clustered Data ONTAP versiones anteriores a 9.3P20 y 9.5, son susceptibles a una vulnerabilidad que podría permitir a un atacante autenticado pero no autorizado sobrescribir datos arbitrarios cuando la compatibilidad con VMware vStorage está habilitada"
    }
  ],
  "lastModified": "2026-06-17T03:26:35.493",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2ADD72CC-ED33-4448-ADB2-F3FEF3DF1754",
              "versionEndExcluding": "9.3"
            },
            {
              "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "56D9B2C2-51AF-49E5-BC1E-8274BB346C8B",
              "versionEndIncluding": "9.5",
              "versionStartIncluding": "9.4"
            },
            {
              "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "32B7A7A6-AFC0-47D2-AE92-A1751B7F0D34"
            },
            {
              "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "93C8874B-9D5B-4629-AA72-ED893CF5585A"
            },
            {
              "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p10:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0ECBAC3F-F8C2-4DD0-92CC-947F37B24D54"
            },
            {
              "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DDDA828E-8DE6-4BFA-9CB4-DD22B3FD0495"
            },
            {
              "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0FECE5C3-29EC-469B-BB28-3DE79F97DA33"
            },
            {
              "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B5B2E220-8FA2-46AD-9507-705391C4A5E9"
            },
            {
              "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2038E75E-4315-4C9F-B4C6-4A4440DCBA89"
            },
            {
              "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p6:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7C1ACB5D-2542-4476-917D-67D6E3199EDE"
            },
            {
              "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p7:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6482EBD8-9245-4250-B70B-57402954C0B8"
            },
            {
              "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p8:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "61EF3D56-3C92-43D5-9A55-E2579BA9393B"
            },
            {
              "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p9:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B5220981-B4F6-4461-BEC4-6C304EA650A4"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security-alert@netapp.com"
}