CVE-2024-21983

MEDIUM

StorageGRID <11.8 - DoS

Title source: llm

Description

StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8 are susceptible to a Denial of Service (DoS) vulnerability. Successful exploit by an authenticated attacker could lead to an out of memory condition or node reboot.

References (1)

[Patch, Vendor Advisory] https://security.netapp.com/advisory/ntap-20240216-0012/

Scores

CVSS v3 6.5

EPSS 0.0022

EPSS Percentile 44.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Classification

CWE

CWE-248

Status published

Affected Products (1)

netapp/storagegrid < 11.7.0.8

Timeline

Published Feb 16, 2024

Tracked Since Feb 18, 2026