CVE-2021-27007

CRITICAL

NetApp Virtual Desktop Service < 6.1.21356.1837 - Unauthenticated Remote Desktop Session Takeover via HTML5 Gateway

Title source: llm
STIX 2.1

Description

NetApp Virtual Desktop Service (VDS) when used with an HTML5 gateway is susceptible to a vulnerability which when successfully exploited could allow an unauthenticated attacker to takeover a Remote Desktop Session.

References (1)

Core 1
Core References

Scores

CVSS v3 9.8
EPSS 0.0071
EPSS Percentile 72.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

Status published
Products (1)
netapp/virtual_desktop_service < 6.1.21356.1837
Published Dec 23, 2021
Tracked Since Feb 18, 2026