Back to Database
Status published
High
CVE-2019-17274
NetApp FAS 8300/8700 and AFF A400 Baseboard Management Controller (BMC)...
Vulnerability Description
NetApp FAS 8300/8700 and AFF A400 Baseboard Management Controller (BMC) firmware versions 13.x prior to 13.1P1 were shipped with a default account enabled that could allow unauthorized arbitrary command execution via local access.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-17274
Credits & Attribution
No credits recorded in the NVD database.
More from NetApp
View All →CVE-2025-26517
CVE-2025-26517 Privilege Escalation Vulnerability in StorageGRID (formerly StorageGRID Webscale)
Medium
5.4
CVE-2025-26516
CVE-2025-26516 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)
Medium
5.3
CVE-2025-26515
CVE-2025-26515 Server-Side Request Forgery Vulnerability in StorageGRID (formerly StorageGRID Webscale)
High
7.5
CVE-2025-26514
CVE-2025-26514 Reflected Cross-Site Scripting Vulnerability in StorageGRID (formerly StorageGRID Webscale)
Medium
6.4
CVE-2025-26513
The installer for SAN Host Utilities for Windows versions prior...
High
7
Affected Vendor
NetApp
View all reports →Affected Software
NetApp FAS 8300/8700 and AFF A400 Baseboard Management Controller
Vulnerable Versions:
13.x prior to 13.1P1
Timeline
Official Publish:
February 26th, 2020
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.