CyberSec.Space Logo
Back to CVE Browser

CVE-2016-6667

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.0610%
EPSS Percentile30.56th
PublishedFeb 7, 2017
Last ModifiedMay 13, 2026

Vulnerability Description

NetApp OnCommand Unified Manager for Clustered Data ONTAP 6.3 through 6.4P1 contain a default privileged account, which allows remote attackers to execute arbitrary code via unspecified vectors.

Affected Platforms (CPE)

📦
Netapp

Oncommand Unified Manager For Clustered Data Ontap

= 6.3
📦
Netapp

Oncommand Unified Manager For Clustered Data Ontap

= 6.4
📦
Netapp

Oncommand Unified Manager For Clustered Data Ontap

= 6.4

References & Advisories

🔗 https://kb.netapp.com/support/s/article/NTAP-20161017-0002
🔗 https://kb.netapp.com/support/s/article/NTAP-20161017-0002

Related Vulnerabilities

CVE-2017-140537.5

NetApp OnCommand Unified Manager for Clustered Data ONTAP before 7.2P1 does not set the secure flag for an unspecified cookie in a...

CVE-2017-73455.3

NetApp OnCommand Performance Manager and OnCommand Unified Manager for Clustered Data ONTAP before 7.1P1 improperly bind the Java ...

CVE-2016-089810.0

MySQL for PCF tiles 1.7.x before 1.7.10 were discovered to log the AWS access key in plaintext. These credentials were logged to t...

CVE-2016-933510.0

A hard-coded cryptographic key vulnerability was identified in Red Lion Controls Sixnet-Managed Industrial Switches running firmwa...