Skip to content
Sign in
4.3 Medium

CVE-2023-27317 ONTAP 9 versions 9.12.1P8, 9.13.1P4, and 9.13.1P5 are susceptible to a vulnerability which will cause all…

Description

ONTAP 9 versions 9.12.1P8, 9.13.1P4, and 9.13.1P5 are susceptible to a vulnerability which will cause all SAS-attached FIPS 140-2 drives to become unlocked after a system reboot or power cycle or a single SAS-attached FIPS 140-2 drive to become unlocked after reinsertion. This could lead to disclosure of sensitive information to an attacker with physical access to the unlocked drives.

Affected products and versions

Product Affected versions Fixed in
ONTAP 9 9.13 9.13.1P4 → 9.13.1P5 No fix stated
ONTAP 9 9.12.1P8 No fix stated

Other CVEs of ONTAP 9

The 8 CVEs of ONTAP 9 →
CVE-2026-22063 CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products 6.0 Medium CVE-2026-22049 ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configured are susceptible to a… 8.7 High CVE-2026-22052 ONTAP versions 9.12.1 and higher with S3 NAS buckets are susceptible to an information disclosure vulnerability 5.3 Medium CVE-2026-22050 ONTAP versions 9.16.1 prior to 9.16.1P9 and 9.17.1 prior to 9.17.1P2 with snapshot locking enabled are susceptible to… 6.9 Medium
Track this CVE