Product by NetApp

NetApp SANtricity SMI-S Provider

13 known vulnerabilities in NetApp SANtricity SMI-S Provider (NetApp), 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in NetApp SANtricity SMI-S Provider (NetApp)

Critical	CVE-2021-3711	SM2 Decryption Buffer Overflow also in 31 other products	9.8	24.08.2021
Critical	CVE-2022-2068	The c_rehash script allows command injection also in 33 other products	7.3	21.06.2022
High	CVE-2022-0778	Infinite loop in BN_mod_sqrt() reachable when parsing certificates also in 15 other products	7.5	15.03.2022
Critical	CVE-2022-1292	The c_rehash script allows command injection also in 38 other products	7.3	03.05.2022
High	CVE-2021-3712	Read buffer overruns processing ASN.1 strings also in 33 other products	7.4	24.08.2021
Medium	CVE-2021-3449	NULL pointer deref in signature_algorithms processing also in 90 other products	5.9	25.03.2021
High	CVE-2022-1473	Resource leakage when decoding certificates and keys also in 27 other products	7.5	03.05.2022
Medium	CVE-2019-1559	0-byte record padding oracle also in 79 other products	5.9	27.02.2019
Medium	CVE-2018-0734	Timing attack against DSA also in 17 other products	5.9	30.10.2018
Medium	CVE-2020-1971	EDIPARTYNAME NULL pointer dereference also in 43 other products	5.9	08.12.2020
Medium	CVE-2018-0735	Timing attack against ECDSA signature generation also in 21 other products	5.9	29.10.2018
Medium	CVE-2022-1343	OCSP_basic_verify may incorrectly verify the response signing certificate also in 27 other products	5.3	03.05.2022
Medium	CVE-2022-1434	Incorrect MAC key used in the RC4-MD5 ciphersuite also in 27 other products	5.9	03.05.2022