Vulnerability in Netapp H300s
CVE-2023-5363
Issue summary: A bug has been identified in the processing of key and initialisation vector (IV) lengths. This can lead to potential truncation or overruns during the initialisation of some symmetric ciphers. Impact summary: A truncation…
EPSS: 0.065 (91.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
Weakness classification (CWE)
Public proof-of-concept exploits
References
- openssl-security@openssl.org (vendor-advisory, Vendor Advisory)
- openssl-security@openssl.org (Patch, patch, Vendor Advisory)
- openssl-security@openssl.org (Patch, Mailing List, Third Party Advisory, patch)
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
Frequently asked questions
- What is CVE-2023-5363?
- CVE-2023-5363 is a high-severity vulnerability in Netapp H300s, classified under CWE-684. CVSS score: 7.5/10. Published 2023-10-25.
- How severe is CVE-2023-5363?
- High severity. CVSS v3 base score is 7.5 out of 10.
- Is CVE-2023-5363 known to be exploited?
- 10 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.