CVE-2020-8581

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-01-19 · updated 2026-06-17

Description

Clustered Data ONTAP versions prior to 9.3P20 and 9.5 are susceptible to a vulnerability which could allow an authenticated but unauthorized attacker to overwrite arbitrary data when VMware vStorage support is enabled.

Affected products

Clustered Data ONTAP: before 9.3; from 9.4 through 9.5; 9.3, 9.3-p1, 9.3-p10, 9.3-p2, 9.3-p3, 9.3-p4 (+5) — fixed in 9.3

How to fix

Upgrade to a fixed version: Clustered Data ONTAP 9.3. Check the vendor advisory for mitigations.

References

https://security.netapp.com/advisory/ntap-20210119-0001/
https://security.netapp.com/advisory/ntap-20210119-0001/

Get alerted when CVE-2020-8581 or the next vulnerability affects your stack