netapp solidfire & hci storage node

Name: netapp solidfire & hci storage node
Brand: netapp

productUS

cpe:2.3:a:netapp:solidfire_\&_hci_storage_node:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

5critical9high5medium2low

updated 2026-10-28

vulnerabilities (26)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-44228US	critical10.0OT critical	100.0% (100th)	KEV	no fix	2021-12-10	—
CVE-2023-5178US	high8.8	9.62% (95th)	Exploit	no fix	2023-11-01	—
CVE-2022-36946US	high7.5	8.87% (95th)	Exploit	no fix	2022-07-27	—
CVE-2024-50602US	—	1.12% (66th)	Exploit	no fix	2024-10-27	—
CVE-2018-20836US	high8.1	5.09% (92nd)	—	no fix	2019-05-07	—
CVE-2022-27776US	medium6.5	4.10% (91st)	—	no fix	2022-06-02	—
CVE-2022-27775US	high7.5OT elevated	3.34% (89th)	—	no fix	2022-06-02	—
CVE-2023-38428US	critical9.1	3.16% (88th)	—	no fix	2023-07-18	—
CVE-2023-38426US	critical9.1	3.04% (87th)	—	no fix	2023-07-18	—
CVE-2022-2048US	high7.5	2.56% (85th)	—	no fix	2022-07-07	—
CVE-2023-38432US	critical9.1	2.52% (85th)	—	no fix	2023-07-18	—
CVE-2022-22576US	high8.1OT elevated	2.52% (85th)	—	no fix	2022-05-26	—
CVE-2020-25645US	high7.5OT elevated	2.43% (84th)	—	no fix	2020-10-13	—
CVE-2023-32257US	high8.1	2.37% (84th)	—	no fix	2023-07-24	—
CVE-2022-27774US	medium5.7	2.01% (81st)	—	no fix	2022-06-02	—
CVE-2025-0725US	—	1.80% (78th)	—	no fix	2025-02-05	—
CVE-2022-2047US	low2.7	1.32% (71st)	—	no fix	2022-07-07	—
CVE-2021-3772US	medium6.5	1.24% (69th)	—	no fix	2022-03-02	—
CVE-2024-40896US	—	1.22% (69th)	—	no fix	2024-12-23	—
CVE-2020-12464US	medium6.7	0.80% (57th)	—	no fix	2020-04-29	—
CVE-2025-0167US	—	0.75% (55th)	—	no fix	2025-02-05	—
CVE-2023-37920US	critical9.8OT elevated	0.57% (47th)	—	no fix	2023-07-25	—
CVE-2024-36958US	medium5.5	0.50% (42nd)	—	no fix	2024-05-30	—
CVE-2020-29374US	low3.6OT elevated	0.40% (35th)	—	no fix	2020-11-28	—
CVE-2024-33602US	—	0.40% (34th)	—	no fix	2024-05-06	—
CVE-2020-29569US	high8.8	0.40% (34th)	—	no fix	2020-12-15	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation4 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-416Use After Free4 CVEs
CWE-125Out-of-bounds Read3 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')3 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-404Improper Resource Shutdown or Release2 CVEs
CWE-522Insufficiently Protected Credentials2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE26 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan