netapp hci baseboard management controller

Name: netapp hci baseboard management controller
Brand: netapp

productUS

cpe:2.3:a:netapp:hci_baseboard_management_controller:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

critical

by severity

0critical23high9medium1low

updated 2026-10-28

vulnerabilities (34)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-11023US	medium6.1OT critical	84.9% (100th)	KEV	no fix	2020-04-29	—
CVE-2023-50868US	high7.5	74.3% (99th)	Exploit	no fix	2024-02-14	—
CVE-2023-32233US	high7.8	13.4% (96th)	Exploit	no fix	2023-05-08	5 versions
CVE-2021-45960US	high8.8	4.67% (92nd)	Exploit	no fix	2022-01-01	3 versions
CVE-2021-46143US	high7.8	4.22% (91st)	Exploit	no fix	2022-01-06	3 versions
CVE-2019-19447US	high7.8	3.52% (89th)	Exploit	no fix	2019-12-08	= h610s
CVE-2023-2598US	high7.8	1.37% (72nd)	Exploit	no fix	2023-06-01	5 versions
CVE-2021-4154US	high8.8	1.22% (68th)	Exploit	no fix	2022-02-04	7 versions
CVE-2023-26607US	high7.1	0.61% (49th)	Exploit	no fix	2023-02-26	5 versions
CVE-2019-19052US	high7.5	5.23% (92nd)	—	no fix	2019-11-18	= h610s
CVE-2019-19044US	high7.5	4.03% (91st)	—	no fix	2019-11-18	= h610s
CVE-2019-19060US	high7.5	3.61% (89th)	—	no fix	2019-11-18	= h610s
CVE-2019-19061US	high7.5	3.39% (89th)	—	no fix	2019-11-18	= h610s
CVE-2019-19053US	high7.5	3.29% (88th)	—	no fix	2019-11-18	= h610s
CVE-2025-0725US	—	1.80% (78th)	—	no fix	2025-02-05	—
CVE-2019-19922US	medium5.5	0.95% (61st)	—	no fix	2019-12-22	= h610s
CVE-2019-19063US	medium4.6	0.90% (59th)	—	no fix	2019-11-18	= h610s
CVE-2020-12464US	medium6.7	0.80% (56th)	—	no fix	2020-04-29	8 versions
CVE-2019-19057US	low3.3	0.79% (56th)	—	no fix	2019-11-18	= h610s
CVE-2020-12659US	medium6.7	0.71% (53rd)	—	no fix	2020-05-05	8 versions
CVE-2020-8648US	high7.1	0.66% (51st)	—	no fix	2020-02-06	= h410c
CVE-2019-19966US	medium4.6	0.63% (50th)	—	no fix	2019-12-25	= h610s
CVE-2022-41222US	high7.0	0.49% (42nd)	—	no fix	2022-09-21	5 versions
CVE-2019-19947US	medium4.6	0.49% (42nd)	—	no fix	2019-12-24	= h610s
CVE-2019-19054US	medium4.7	0.45% (39th)	—	no fix	2019-11-18	= h610s
CVE-2023-3141US	high7.1	0.44% (38th)	—	no fix	2023-06-09	5 versions
CVE-2023-2236US	high7.8	0.43% (37th)	—	no fix	2023-05-01	5 versions
CVE-2020-12465US	medium6.7	0.38% (32nd)	—	no fix	2020-04-29	8 versions
CVE-2023-2006US	high7.0	0.36% (30th)	—	no fix	2023-04-24	5 versions
CVE-2022-28390US	high7.8	0.36% (29th)	—	no fix	2022-04-03	8 versions
CVE-2022-39189US	high7.8OT elevated	0.34% (27th)	—	no fix	2022-09-02	5 versions
CVE-2022-1729US	high7.0	0.33% (26th)	—	no fix	2022-09-01	4 versions
CVE-2023-23559US	high7.8	0.31% (24th)	—	no fix	2023-01-13	5 versions
CVE-2022-41858US	high7.1	0.28% (20th)	—	no fix	2023-01-17	5 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-416Use After Free13 CVEs
CWE-400Uncontrolled Resource Consumption11 CVEs
CWE-401Missing Release of Memory after Effective Lifetime8 CVEs
CWE-125Out-of-bounds Read3 CVEs
CWE-190Integer Overflow or Wraparound3 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')3 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2 CVEs
CWE-680Integer Overflow to Buffer Overflow2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE34 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan