CVE-2019-5490: netapp, inc. netapp service processor
Vulnerability summary
CVE-2019-5490 is a high (CVSS 10.0) vulnerability in netapp, inc. netapp service processor. EPSS estimates a 3.49% chance of exploitation in the next 30 days, higher than 89% of scored vulnerabilities.
Timeline
- 21-03-2019PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
Certain versions between 2.x to 5.x (refer to advisory) of the NetApp Service Processor firmware were shipped with a default account enabled that could allow unauthorized arbitrary command execution. Any platform listed in the advisory Impact section may be affected and should be upgraded to a fixed version of Service Processor firmware IMMEDIATELY.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
3.49%
Chance of exploitation in the next 30 days
Percentile
89%
Versus all other CVEs
30-day change
0.00 pp
From 3.49% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Netapp1 product
- service_processor2.8 | 3.7 | 4.5 | 5.5 | 2.5 | 3.4 | 3.4:patch1 | 3.4:patch2 | 4.2 | 4.2:patch1 | 4.2:patch2 | 5.2 | 5.2:patch1 | 2.4.1 | 2.4.1:patch1 | 3.3 | 3.3:patch1 | 3.3:patch2 | 3.3:patch3 | 3.3:patch4 | 4.1 | 4.1:patch1 | 4.1:patch2 | 4.1:patch3 | 4.1:patch4 | 4.1:patch5 | 4.1:patch6 | 5.1 | 5.1:patch1 | 5.1:patch2 | 5.1:patch3 | 2.4 | 3.2 | 2.3.2 | 2.3.2:patch1 | 2.3.2:patch2 | 2.3.2:patch3 | 3.1.2 | 3.1.2:patch1 | 3.1.2:patch2 | 2.2.5 | 3.0.4
Netapp, inc.1 product
- netapp service processor2.x-5.x - refer to advisory
2 vendors · 2 products
References
2 links- support.lenovo.com/us/en/solutions/LEN-26771X Refsource CONFIRM