NetApp H610C Firmware vulnerabilities

38 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Exploited NetApp H610C Firmware vulnerabilities

CVE-2025-0167 — netrc and default credential leak (CVSS 3.4)
CVE-2024-11053 — netrc and redirect credential leak (CVSS 3.4)
CVE-2024-6119 — Possible denial of service in X.509 name checks (CVSS 7.5)
CVE-2024-33601 — nscd: netgroup cache may terminate daemon on memory allocation failure (CVSS 7.3)
CVE-2024-33600 — nscd: Null pointer crashes after notfound response (CVSS 5.9)
CVE-2024-26735 — ipv6: sr: fix possible use-after-free and null-ptr-deref (CVSS 5.5)
CVE-2024-26733 — arp: Prevent overflow in arp_req_get(). (CVSS 5.5)
CVE-2024-2398 — HTTP/2 push headers memory-leak (CVSS 8.6)
CVE-2024-2379 — QUIC certificate check bypass with wolfSSL (CVSS 6.3)
CVE-2024-26633 — ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (CVSS 5.5)
CVE-2024-28757 — (CVSS 7.5)
CVE-2023-52585 — drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper() (CVSS 5.5)
CVE-2024-26462 — (CVSS 5.5)
CVE-2024-26461 — (CVSS 7.5)
CVE-2024-26458 — (CVSS 5.3)
CVE-2022-36879 — (CVSS 5.5)
CVE-2022-2068 — The c_rehash script allows command injection (CVSS 7.3)
CVE-2022-0995 — Linux Kernel Out-of-Bounds Write Vulnerability (CVSS 7.8) — exploited
CVE-2021-3609 — (CVSS 7.0)
CVE-2021-3772 — (CVSS 6.5)
CVE-2020-36516 — (CVSS 5.9)
CVE-2021-45485 — (CVSS 7.5)
CVE-2021-40490 — (CVSS 7.0)
CVE-2021-22555 — Linux Kernel Heap Out-of-Bounds Write Vulnerability (CVSS 7.8) — exploited
CVE-2021-36086 — (CVSS 3.3)