CVE-2016-3400 - NetApp Data ONTAP 8.1 and 8.2, when operating in 7-Mode, allows man-in-the-middle attackers to obtai

CVE-2016-3400

Summary

NetApp Data ONTAP 8.1 and 8.2, when operating in 7-Mode, allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service via vectors related to the SMB protocol.

References

Vulnerable Configurations

cpe:2.3:a:netapp:data_ontap:8.1:*:*:*:*:*:*:*
cpe:2.3:a:netapp:data_ontap:8.1:*:*:*:*:*:*:*
cpe:2.3:a:netapp:data_ontap:8.2:*:*:*:*:*:*:*
cpe:2.3:a:netapp:data_ontap:8.2:*:*:*:*:*:*:*

CVSS

Base:	6.8 (as of 31-08-2017 - 01:29)
Impact:
Exploitability:

CWE

CWE-254

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:M/Au:N/C:P/I:P/A:P

refmap via4

bid	99101
confirm	http://www-01.ibm.com/support/docview.wss?uid=ssg1S1006063 https://kb.netapp.com/support/s/article/ka51A0000008SXzQAM/smb-vulnerabilities-in-multiple-netapp-products
misc	https://exchange.xforce.ibmcloud.com/vulnerabilities/113589

Last major update

31-08-2017 - 01:29

Published

03-07-2017 - 16:29

Last modified

31-08-2017 - 01:29