What’s Vulnerable › Vulnerabilities

CVE-2019-5490

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-03-21 · updated 2026-06-17
• Weakness: CWE-1188

Description

Certain versions between 2.x to 5.x (refer to advisory) of the NetApp Service Processor firmware were shipped with a default account enabled that could allow unauthorized arbitrary command execution. Any platform listed in the advisory Impact section may be affected and should be upgraded to a fixed version of Service Processor firmware IMMEDIATELY.

Affected products

• NetApp, Inc. NetApp Service Processor: 2.8, 3.7, 4.5, 5.5, 2.5, 3.4 (+36)

References

• http://support.lenovo.com/us/en/solutions/LEN-26771
• https://security.netapp.com/advisory/ntap-20190305-0001/
• http://support.lenovo.com/us/en/solutions/LEN-26771
• https://security.netapp.com/advisory/ntap-20190305-0001/

Get alerted when CVE-2019-5490 or the next vulnerability affects your stack