What’s Vulnerable › Vulnerabilities

CVE-2020-8584

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-01-08 · updated 2026-06-17

Description

Element OS versions prior to 1.8P1 and 12.2 are susceptible to a vulnerability that could allow an unauthenticated remote attacker to perform arbitrary code execution.

Affected products

• NetApp Element Os: before 1.8; from 12.0 through 12.2; 1.8 — fixed in 1.8
• NetApp Hci Management Node: all versions
• NetApp Hci Storage Node: all versions
• NetApp Solidfire: all versions

How to fix

Upgrade to a fixed version: NetApp Element Os 1.8. Check the vendor advisory for mitigations.

References

• https://security.netapp.com/advisory/ntap-20210108-0008/
• https://security.netapp.com/advisory/ntap-20210108-0008/

Get alerted when CVE-2020-8584 or the next vulnerability affects your stack