NetApp ONTAP Tools for VMware vSphere 10 Vulnerability Enables Remote DoS and Data Integrity Impact
A vulnerability has been identified in NetApp ONTAP tools for VMware vSphere 10 that allows an attacker to cause a remote denial of service (DoS) and compromise data integrity. This vulnerability impacts versions prior to 10.5P2. The vendor, NetApp, has released security advisory NTAP-20260410-0004 advising users to apply the available patches to mitigate these risks. Additionally, the product Astra Control Provisioner is mentioned as not having a planned fix for this vulnerability, indicating ongoing risk for users of that product. The flaw is cataloged as CVE-2023-28840 and requires attention from administrators managing affected environments to prevent service disruption and maintain data integrity.
Entenda a falha
A vulnerabilidade
CVE-2023-28840 affects NetApp ONTAP tools for VMware vSphere 10, in versions prior to patch 10.5P2. According to CERT-FR and NetApp advisory NTAP-20260410-0004, an attacker can cause a remote denial of service and impact data integrity. The articles do not say what access, authentication or configuration is required. The fix is 10.5P2. For Astra Control Provisioner, NetApp says no fix is planned.
Como funciona
The articles do not describe how the vulnerable process works, so the exact input, component and failing step are not known from these sources. They state only the outcome: a remote attacker can disrupt the service and affect the integrity of data.
Por que é vulnerável
The articles do not state the root cause of CVE-2023-28840 or why it went unnoticed. The fix is delivered in patch 10.5P2 of ONTAP tools for VMware vSphere 10, but what it changes is not described.
Como foi descoberta
The articles do not say who found the flaw or how. The CVE ID dates from 2023, but the articles give no earlier history for it. NetApp published advisory NTAP-20260410-0004 on 11 November 2026, and CERT-FR republished it in its notice CERTFR-2026-AVI-1518.
Explicação gerada por IA a partir da matéria e dos artigos, em 12/11/2026 13:20.
Linha do tempo
-
NetApp ONTAP Tools for VMware vSphere 10 Vulnerability Enables Remote DoS and Data Integrity Impact
ler a análise desta fonte ocultar
A vulnerability has been identified in NetApp ONTAP tools for VMware vSphere 10 that allows an attacker to cause a remote denial of service (DoS) and compromise data integrity. This vulnerability impacts versions prior to 10.5P2. The vendor, NetApp, has released security advisory NTAP-20260410-0004 advising users to apply the available patches to mitigate these risks. Additionally, the product Astra Control Provisioner is mentioned as not having a planned fix for this vulnerability, indicating ongoing risk for users of that product. The flaw is cataloged as CVE-2023-28840 and requires attention from administrators managing affected environments to prevent service disruption and maintain data integrity.