CVE-2020-8576
MEDIUM
5.4
CVSS Score
Published: September 2, 2020 at 07:15 PM UTC
Updated: June 17, 2026 at 03:26 AM UTC
1 product affected across 1 vendorClustered Data ONTAP
Using Clustered Data ONTAP by N/A?
Get instant alerts when new vulnerabilities affect Clustered Data ONTAP - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.4
Exploit prediction
EPSS 0.7%
Description
Clustered Data ONTAP versions prior to 9.3P19, 9.5P14, 9.6P9 and 9.7 are susceptible to a vulnerability which when successfully exploited could lead to addition or modification of data or disclosure of sensitive information.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 9.3v < 9.3P199.39.3 p19.3 p109.3 p119.3 p129.3 p12d39.3 p139.3 p149.3 p14d39.3 p159.3 p15d79.3 p169.3 p179.3 p17d19.3 p189.3 p18d19.3 p199.3 p29.3 p39.3 p49.3 p59.3 p69.3 p79.3 p7d49.3 p7d59.3 p89.3 p99.3 rc19.59.5 p19.5 p109.5 p10d19.5 p10d29.5 p119.5 p11d29.5 p11d39.5 p11d49.5 p129.5 p12d19.5 p12d49.5 p139.5 p13d19.5 p149.5 p1d19.5 p29.5 p39.5 p3d49.5 p3d79.5 p49.5 p4d19.5 p4d29.5 p59.5 p5d29.5 p69.5 p6d39.5 p79.5 p89.5 p8d39.5 p99.5 p9d39.5 p9d49.5 p9d59.5 rc19.69.6 d29.6 p19.6 p29.6 p2d19.6 p39.6 p3d129.6 p3d59.6 p3d69.6 p49.6 p4d19.6 p4d39.6 p59.6 p5d59.6 p5d69.6 p5d89.6 p69.6 p6d19.6 p6d29.6 p6d39.6 p6d69.6 p6d79.6 p79.6 p7d19.6 p89.6 p8d19.6 p99.6 rc19.6 rc29.7 rc1
Affected range stops below 9.3P19, so it looks safe — our inference, not a vendor statement
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (1)
x_refsource_MISCVendor Advisory
Source: [email protected]
https://security.netapp.com/advisory/NTAP-20200902-0001/CVSS
- Attack Vector
- NETWORK
- Complexity
- LOW
- Privileges
- LOW
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- LOW
- Integrity
- LOW
- Availability
- NONE
Vector?
Quick Info
StatusMODIFIED
CWE
NVD-CWE-noinfo
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card