by Kastro
Paper/Archive/CVE-2021-26987

CVE-2021-26987

netapp — Element Plug-in for vCenter Server incorporates SpringBoot Framework.

EPSS 2%CVSS 9.8
critical.is priorityof 100
46
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 84.3.843 × 2016.9No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Element Plug-in for vCenter Server incorporates SpringBoot Framework. SpringBoot Framework versions prior to 1.3.2 are susceptible to a vulnerability which when successfully exploited could lead to Remote Code Execution. All versions of Element Plug-in for vCenter Server, Management Services versions prior to 2.17.56 and Management Node versions through 12.2 contain vulnerable versions of SpringBoot Framework.

Affected

ProductAffectedFixed inSource
Element Plug-in for vCenter ServerAll versions–CNA
Management Services for Element Software and NetApp HCIversions prior to 2.17.56–CNA
NetApp SolidFire & HCI Management Nodeversions through 12.2–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refsecurity.netapp.com/advisory/ntap-20210315-0001