CVE-2021-27004

MEDIUM 5.5CVE-2021-27004 · Published 01/11/2021 · updated 17/06/2026

In short

CVE-2021-27004 is a MEDIUM (CVSS 5.5) vulnerability affecting ontap system manager (netapp).
Chance of exploitation in the next 30 days (EPSS): 0.22%, higher than 12.9% of all vulnerabilities.
Fix: update to 9.7 or later.

Package	Affected versions	Patched versions
ontap system manager netapp	`= 9.7= 9.8= 9.9.12≥ 9.0, < 9.7`	`9.7`

Description

System Manager 9.x versions 9.7 and higher prior to 9.7P16, 9.8P7 and 9.9.1P2 are susceptible to a vulnerability which could allow a local attacker to discover plaintext iSCSI CHAP credentials.

References

security.netapp.com/advisory/NTAP-20211029-0001 · Patch

More vulnerabilities in ontap system manager

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free