CVE-2020-8584
CVE-2020-8584 is a critical-severity vulnerability in Netapp Hci Management Node with a CVSS 3.x base score of 9.8. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Critical (CVSS 3.x base score 9.8)
- CVSS v2: 10.0
- EPSS exploit prediction: 4% (90th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Netapp Hci Management Node
- Published:
- Last modified:
Description
Element OS versions prior to 1.8P1 and 12.2 are susceptible to a vulnerability that could allow an unauthenticated remote attacker to perform arbitrary code execution.
Frequently asked questions
- What is CVE-2020-8584?
- Element OS versions prior to 1.8P1 and 12.2 are susceptible to a vulnerability that could allow an unauthenticated remote attacker to perform arbitrary code execution.
- How severe is CVE-2020-8584?
- CVE-2020-8584 has a CVSS 3.x base score of 9.8, rated critical severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.
- Is CVE-2020-8584 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 4% (90th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2020-8584?
- CVE-2020-8584 primarily affects Netapp Hci Management Node. In total, 5 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2020-8584?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
- When was CVE-2020-8584 published?
- CVE-2020-8584 was published on 2021-01-08 and last updated on 2026-06-17.
References
Affected products (5)
- cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*
- cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*
- cpe:2.3:h:netapp:hci_storage_node:-:*:*:*:*:*:*:*
- cpe:2.3:o:netapp:element_os:*:*:*:*:*:*:*:*
- cpe:2.3:o:netapp:element_os:1.8:-:*:*:*:*:*:*
More vulnerabilities in Netapp Hci Management Node
- CVE-2023-32254 — Critical (CVSS 9.8): A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within…
- CVE-2022-32207 — Critical (CVSS 9.8): When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the…
- CVE-2021-42377 — Critical (CVSS 9.8): An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution…
- CVE-2021-3711 — Critical (CVSS 9.8): In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt().…
- CVE-2019-17006 — Critical (CVSS 9.8): In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases…
- CVE-2019-18805 — Critical (CVSS 9.8): An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is a…