CVE:CVE-2019-5490
CNNVD:CNNVD-201903-293
NetApp Service Processor是美国NetApp公司的一款远程管理设备。该产品提供节点远程管理能力，包括控制台重定向，记录和功率控制等。
使用5.x、4.x、3.x和2.x版本固件的NetApp Service Processor中存在安全漏洞，该漏洞源于程序带有被启用的默认权限账户。攻击者可利用该漏洞执行任意命令。
solution:Upgrade netapp service_processor to a higher version than 2.8,3.7,4.5,5.5,2.5,3.4,3.4:patch1,3.4:patch2,4.2,4.2:patch1,4.2:patch2,5.2,5.2:patch1,2.4.1,2.4.1:patch1,3.3,3.3:patch1,3.3:patch2,3.3:patch3,3.3:patch4,4.1,4.1:patch1,4.1:patch2,4.1:patch3,4.1:patch4,4.1:patch5,4.1:patch6,5.1,5.1:patch1,5.1:patch2,5.1:patch3,2.4,3.2,2.3.2,2.3.2:patch1,2.3.2:patch2,2.3.2:patch3,3.1.2,3.1.2:patch1,3.1.2:patch2,2.2.5,3.0.4,and avoid the version 2.8,3.7,4.5,5.5,2.5,3.4,3.4:patch1,3.4:patch2,4.2,4.2:patch1,4.2:patch2,5.2,5.2:patch1,2.4.1,2.4.1:patch1,3.3,3.3:patch1,3.3:patch2,3.3:patch3,3.3:patch4,4.1,4.1:patch1,4.1:patch2,4.1:patch3,4.1:patch4,4.1:patch5,4.1:patch6,5.1,5.1:patch1,5.1:patch2,5.1:patch3,2.4,3.2,2.3.2,2.3.2:patch1,2.3.2:patch2,2.3.2:patch3,3.1.2,3.1.2:patch1,3.1.2:patch2,2.2.5,3.0.4