What’s Vulnerable › Vulnerabilities

CVE-2019-5497

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-07-01 · updated 2026-06-17
• Weakness: CWE-1188

Description

NetApp AFF A700s Baseboard Management Controller (BMC) firmware versions 1.22 and higher were shipped with a default account enabled that could allow unauthorized arbitrary command execution.

Affected products

• NetApp Aff A700S Firmware: from 1.22
• Clustered Data ONTAP: all versions

References

• https://security.netapp.com/advisory/ntap-20190627-0001/
• https://security.netapp.com/advisory/ntap-20190627-0001/

Get alerted when CVE-2019-5497 or the next vulnerability affects your stack