CVE-2020-8581 : Clustered Data ONTAP versions prior to 9.3P20 and 9.5 are susceptible to a vulnerability which could allow an authentica

Clustered Data ONTAP versions prior to 9.3P20 and 9.5 are susceptible to a vulnerability which could allow an authenticated but unauthorized attacker to overwrite arbitrary data when VMware vStorage support is enabled.

Published 2021-01-19 18:15:13

Updated 2021-07-21 11:39:24

Source NetApp, Inc.

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2020-8581

EPSS FAQ

0.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 21 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-8581

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
3.5	LOW	AV:N/AC:M/Au:S/C:N/I:P/A:N	6.8	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: Single Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None
6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N	2.8	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: High Availability: None

Products affected by CVE-2020-8581

Netapp » Clustered Data Ontap
Versions before (<) 9.3
cpe:2.3:a:netapp:clustered_data_ontap:*:*:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap
Versions from including (>=) 9.4 and up to, including, (<=) 9.5
cpe:2.3:a:netapp:clustered_data_ontap:*:*:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.3 Update P10
cpe:2.3:a:netapp:clustered_data_ontap:9.3:p10:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.3 Update P3
cpe:2.3:a:netapp:clustered_data_ontap:9.3:p3:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.3 Update P5
cpe:2.3:a:netapp:clustered_data_ontap:9.3:p5:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.3
cpe:2.3:a:netapp:clustered_data_ontap:9.3:-:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.3 Update P1
cpe:2.3:a:netapp:clustered_data_ontap:9.3:p1:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.3 Update P2
cpe:2.3:a:netapp:clustered_data_ontap:9.3:p2:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.3 Update P4
cpe:2.3:a:netapp:clustered_data_ontap:9.3:p4:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.3 Update P6
cpe:2.3:a:netapp:clustered_data_ontap:9.3:p6:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.3 Update P7
cpe:2.3:a:netapp:clustered_data_ontap:9.3:p7:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.3 Update P8
cpe:2.3:a:netapp:clustered_data_ontap:9.3:p8:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: 9.3 Update P9
cpe:2.3:a:netapp:clustered_data_ontap:9.3:p9:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2020-8581

Exploit prediction scoring system (EPSS) score for CVE-2020-8581

CVSS scores for CVE-2020-8581

References for CVE-2020-8581

Products affected by CVE-2020-8581