netapp aff 500f firmware

Name: netapp aff 500f firmware
Brand: netapp

productUS

cpe:2.3:o:netapp:aff_500f_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical6high7medium0low

updated 2026-10-28

vulnerabilities (14)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-22555US	high7.8OT critical	78.7% (100th)	KEV	no fix	2021-07-07	—
CVE-2022-1292US	high7.3	82.6% (100th)	Exploit	no fix	2022-05-03	—
CVE-2021-41617US	high7.0OT elevated	2.54% (85th)	Exploit	no fix	2021-09-26	—
CVE-2020-15436US	medium6.7	0.93% (60th)	Exploit	no fix	2020-11-23	—
CVE-2021-25216US	critical9.8	83.0% (100th)	—	no fix	2021-04-29	—
CVE-2021-25214US	medium6.5	6.40% (94th)	—	no fix	2021-04-29	—
CVE-2020-14305US	high8.1	5.15% (92nd)	—	no fix	2020-12-02	—
CVE-2022-1473US	high7.5	4.68% (92nd)	—	no fix	2022-05-03	—
CVE-2022-1343US	medium5.3	2.14% (82nd)	—	no fix	2022-05-03	—
CVE-2022-1434US	medium5.9OT elevated	1.23% (69th)	—	no fix	2022-05-03	—
CVE-2021-28971US	medium5.5	0.39% (32nd)	—	no fix	2021-03-22	—
CVE-2021-28952US	high7.8	0.38% (32nd)	—	no fix	2021-03-20	—
CVE-2022-36879US	medium5.5	0.32% (25th)	—	no fix	2022-07-27	—
CVE-2021-28951US	medium5.5	0.28% (20th)	—	no fix	2021-03-20	—

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read2 CVEs
CWE-404Improper Resource Shutdown or Release2 CVEs
CWE-617Reachable Assertion2 CVEs
CWE-787Out-of-bounds Write2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-254CWE-2541 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.