CVE-2021-27007

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-12-23 · updated 2026-06-17

Description

NetApp Virtual Desktop Service (VDS) when used with an HTML5 gateway is susceptible to a vulnerability which when successfully exploited could allow an unauthenticated attacker to takeover a Remote Desktop Session.

Affected products

NetApp Virtual Desktop Service (VDS): before 6.1.21356.1837 — fixed in 6.1.21356.1837

How to fix

Upgrade to a fixed version: NetApp Virtual Desktop Service (VDS) 6.1.21356.1837. Check the vendor advisory for mitigations.

References

https://security.netapp.com/advisory/ntap-20211223-0008/
https://security.netapp.com/advisory/ntap-20211223-0008/

Get alerted when CVE-2021-27007 or the next vulnerability affects your stack