1. Home
  2. CVE Database
  3. CVE-2018-5498
MEDIUM · 4.4

CVE-2018-5498

Clustered Data ONTAP versions 9.0 through 9.4 are susceptible to a vulnerability which allows remote authenticated attackers to cause a Denial of Service (DoS) in NFS and SMB environments. Exploitatio...

Vulnerability Description

Clustered Data ONTAP versions 9.0 through 9.4 are susceptible to a vulnerability which allows remote authenticated attackers to cause a Denial of Service (DoS) in NFS and SMB environments. Exploitation of this vulnerability will allow a remote authenticated attacker to cause a Denial of Service (DoS) on affected versions of clustered Data ONTAP configured for multiprotocol access.

CVSS Score

4.4

MEDIUM

CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
NetappClustered Data Ontap>= 9.0, <= 9.4

Related Weaknesses (CWE)

CWE-20

References

FAQ

What is CVE-2018-5498?

CVE-2018-5498 is a vulnerability with a CVSS score of 4.4 (MEDIUM). Clustered Data ONTAP versions 9.0 through 9.4 are susceptible to a vulnerability which allows remote authenticated attackers to cause a Denial of Service (DoS) in NFS and SMB environments. Exploitatio...

How severe is CVE-2018-5498?

CVE-2018-5498 has been rated MEDIUM with a CVSS base score of 4.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-5498?

Check the references section above for vendor advisories and patch information. Affected products include: Netapp Clustered Data Ontap.