NetApp A250 Firmware vulnerabilities

21 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Exploited NetApp A250 Firmware vulnerabilities

CVE-2024-6119 — Possible denial of service in X.509 name checks (CVSS 7.5)
CVE-2024-6387 — Openssh: regresshion - race condition in ssh allows rce/dos (CVSS 8.1)
CVE-2024-1086 — Linux Kernel Use-After-Free Vulnerability (CVSS 7.8) — exploited
CVE-2023-25136 — (CVSS 6.5)
CVE-2022-1473 — Resource leakage when decoding certificates and keys (CVSS 7.5)
CVE-2022-1434 — Incorrect MAC key used in the RC4-MD5 ciphersuite (CVSS 5.9)
CVE-2022-1343 — OCSP_basic_verify may incorrectly verify the response signing certificate (CVSS 5.3)
CVE-2022-1292 — The c_rehash script allows command injection (CVSS 7.3)
CVE-2022-0778 — Infinite loop in BN_mod_sqrt() reachable when parsing certificates (CVSS 7.5)
CVE-2021-4044 — Invalid handling of X509_verify_cert() internal errors in libssl (CVSS 7.5)
CVE-2020-25668 — (CVSS 7.0)
CVE-2021-31879 — (CVSS 6.1)
CVE-2021-25215 — An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself (CVSS 7.5)
CVE-2021-28952 — (CVSS 7.8)
CVE-2021-28951 — (CVSS 5.5)
CVE-2020-27618 — (CVSS 5.5)
CVE-2020-8625 — A vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack (CVSS 8.1)
CVE-2019-25013 — (CVSS 5.9)
CVE-2020-14305 — (CVSS 8.1)
CVE-2020-29374 — (CVSS 3.6)
CVE-2020-15436 — (CVSS 6.7)