{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[],"affected_systems_content":"<ul> <li>NetApp HCI Baseboard Management Controller (BMC) versions H300S/H500S/H700S/H410S</li> <li>NetApp HCI Baseboard Management Controller (BMC) versions H410C</li> </ul> <p>L\u2019\u00e9diteur pr\u00e9cise que les produits ci-dessus sont en fin de vie (<em>EOL</em>) et ne b\u00e9n\u00e9ficient pas de mises \u00e0 jour de s\u00e9curit\u00e9 pour ces vuln\u00e9rabilit\u00e9s.</p> ","content":"## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur pour l'obtention des\ncorrectifs (cf. section Documentation).\n","cves":[{"name":"CVE-2023-31436","url":"https://www.cve.org/CVERecord?id=CVE-2023-31436"},{"name":"CVE-2023-1670","url":"https://www.cve.org/CVERecord?id=CVE-2023-1670"},{"name":"CVE-2022-4744","url":"https://www.cve.org/CVERecord?id=CVE-2022-4744"},{"name":"CVE-2023-2124","url":"https://www.cve.org/CVERecord?id=CVE-2023-2124"}],"links":[],"reference":"CERTFR-2023-AVI-0760","revisions":[{"description":"Version initiale","revision_date":"2023-09-19T00:00:00.000000"}],"risks":[{"description":"Atteinte \u00e0 l'int\u00e9grit\u00e9 des donn\u00e9es"},{"description":"D\u00e9ni de service"},{"description":"Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"}],"summary":"De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans<span\nclass=\"textit\"> NetApp HCI Baseboard Management Controller</span>. Elles\npermettent \u00e0 un attaquant de provoquer un d\u00e9ni de service, une atteinte\n\u00e0 l'int\u00e9grit\u00e9 des donn\u00e9es et une atteinte \u00e0 la confidentialit\u00e9 des\ndonn\u00e9es.\n","title":"Multiples vuln\u00e9rabilit\u00e9s dans NetApp HCI Baseboard Management Controller","vendor_advisories":[{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 NetApp NTAP-20230526-0009 du 18 septembre 2023","url":"https://security.netapp.com/advisory/ntap-20230526-0009/"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 NetApp NTAP-20230622-0010 du 18 septembre 2023","url":"https://security.netapp.com/advisory/ntap-20230622-0010/"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 NetApp NTAP-20230526-0010 du 18 septembre 2023","url":"https://security.netapp.com/advisory/ntap-20230526-0010/"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 NetApp NTAP-20230609-0001 du 18 septembre 2023","url":"https://security.netapp.com/advisory/ntap-20230609-0001/"}]}