CVE-2019-5490 - CVE House
Back to Database
Status published Critical CVE-2019-5490

Certain versions between 2.x to 5.x (refer to advisory) of...

Vulnerability Description

Certain versions between 2.x to 5.x (refer to advisory) of the NetApp Service Processor firmware were shipped with a default account enabled that could allow unauthorized arbitrary command execution. Any platform listed in the advisory Impact section may be affected and should be upgraded to a fixed version of Service Processor firmware IMMEDIATELY.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-5490

Credits & Attribution

No credits recorded in the NVD database.

References

More from NetApp, Inc.

View All →
CVE-2019-5492
Element Plug-in for vCenter Server versions prior to 4.2.3 may...
High 7.5

Affected Vendor

NetApp, Inc.

View all reports →

Affected Software

NetApp Service Processor
Vulnerable Versions:
2.x-5.x - refer to advisory

Timeline

Official Publish: March 21st, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.