« Volver al listado

CVE-2020-8584

Estado: ModificadaCrítica (9.8)—

Element OS versions prior to 1.8P1 and 12.2 are susceptible to a vulnerability that could allow an unauthenticated remote attacker to perform arbitrary code execution.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (4)

Netapp — Element OSNetapp — HCI Management NodeNetapp — HCI Storage NodeNetapp — Solidfire

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-8584",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "security-alert@netapp.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "Element OS",
          "versions": [
            {
              "status": "affected",
              "version": "Versions prior to 1.8P1 and 12.2"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-01-08T16:15:15.450",
  "references": [
    {
      "url": "https://security.netapp.com/advisory/ntap-20210108-0008/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security-alert@netapp.com"
    },
    {
      "url": "https://security.netapp.com/advisory/ntap-20210108-0008/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Element OS versions prior to 1.8P1 and 12.2 are susceptible to a vulnerability that could allow an unauthenticated remote attacker to perform arbitrary code execution."
    },
    {
      "lang": "es",
      "value": "Las versiones anteriores a 1.8P1 y 12.2 de Element OS, son susceptibles a una vulnerabilidad que podría permitir a un atacante remoto no autenticado llevar a cabo una ejecución código arbitraria"
    }
  ],
  "lastModified": "2026-06-17T03:26:35.787",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A3C19813-E823-456A-B1CE-EC0684CE1953"
            },
            {
              "criteria": "cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A6E9EF0C-AFA8-4F7B-9FDC-1E0F7C26E737"
            },
            {
              "criteria": "cpe:2.3:h:netapp:hci_storage_node:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "02DEB4FB-A21D-4CB1-B522-EEE5093E8521"
            },
            {
              "criteria": "cpe:2.3:o:netapp:element_os:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BF7367D0-853D-4B1C-8D12-242F21843877",
              "versionEndExcluding": "1.8"
            },
            {
              "criteria": "cpe:2.3:o:netapp:element_os:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0FB20935-4758-427D-8050-5C6FBCEC0CB2",
              "versionEndIncluding": "12.2",
              "versionStartIncluding": "12.0"
            },
            {
              "criteria": "cpe:2.3:o:netapp:element_os:1.8:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8FDE6FA5-E718-4434-8BBA-5FD9EDCB952C"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security-alert@netapp.com"
}