CVE-2016-3997: netapp clustered_data_ontap 7PK - Security Features

Vulnerability summary

CVE-2016-3997 is a high (CVSS 7.5) 7PK - Security Features vulnerability in netapp clustered_data_ontap. EPSS estimates a 0.84% chance of exploitation in the next 30 days, higher than 57.1% of scored vulnerabilities.

Timeline

1. 03-07-2017
   PublishedVulnerability first disclosed.
2. 06-08-2024
   Last modifiedVulnerability information updated.

Description

NetApp Clustered Data ONTAP allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service by leveraging failure to enable SMB signing enforcement in its default state.

• CWE-2547PK - Security FeaturesSoftware security is not security software. Here we're concerned with topics like authentication, access control, confidentiality, cryptography, and privilege management.