Skip to content
VulniPulse
Sign in
Medium5.9NetApp

Medium [CVE-2024-13176] OpenSSL Vulnerability in NetApp Products

This medium-severity NetApp advisory covers CVE-2024-13176 affecting AFF Baseboard Management Controller (BMC) - A700s, Active IQ Unified Manager for Linux, Active IQ Unified Manager for VMware vSphere.

NTAP-20250124-0005 Published Jan 24, 2025Updated by vendor Aug 4, 2026
CVE-2024-13176
Affected products & platforms
NetAppAFF / ASA / FASElement SoftwareActive IQ Unified ManagerONTAP tools for VMwareBrocade SANnav / Fabric OS
Open vendor advisory

Android app · Google Play

Monitor future NetApp CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery
Get CVE alertsSee app features

Summary

Multiple NetApp products incorporate OpenSSL. OpenSSL versions 3.4, 3.3, 3.2, 3.1, 3.0, 1.1.1 and 1.0.2 are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information.

Successful exploitation of this vulnerability could lead to disclosure of sensitive information.

Affected products: AFF Baseboard Management Controller (BMC) - A700s, Active IQ Unified Manager for Linux, Active IQ Unified Manager for VMware vSphere, Brocade Fabric Operating System Firmware, FAS/AFF Baseboard Management Controller (BMC) - 8300/8700/A400/C400, FAS/AFF Baseboard Management Controller (BMC) - A250/500f/C250, Management Services for Element Software and NetApp HCI, NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S, NetApp HCI Baseboard Management Controller (BMC) - H410C, NetApp HCI Baseboard Management Controller (BMC) - H610C, NetApp HCI Baseboard Management Controller (BMC) - H610S, NetApp HCI Baseboard Management Controller (BMC) - H615C, NetApp HCI Compute Node (Bootstrap OS), NetApp Manageability SDK, NetApp SolidFire & HCI Management Node, NetApp SolidFire & HCI Storage Node (Element Software), ONTAP tools for VMware vSphere 9, OnCommand Workflow Automation, SnapManager for Hyper-V.

NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status.

Affected versions

No affected-version range was extracted from the source record. The vendor advisory is authoritative — check it before change work.

Official advisory · high-confidence parse· fetched 2 hours ago·verify at source

Fixed versions
  • Brocade Fabric Operating System Firmware: 10.0
  • Management Services for Element Software and NetApp HCI: 2.27.40
  • NetApp Manageability SDK: 9.8P8

Official advisory · high-confidence parse· fetched 2 hours ago·verify at source

Mitigation checklist

Recommended fix / mitigation
  • Update affected NetApp products to a fixed release: Brocade Fabric Operating System Firmware: 10.0, Management Services for Element Software and NetApp HCI: 2.27.40, NetApp Manageability SDK: 9.8P8.
  • Brocade Fabric Operating System Firmware: Fixed in FOS 10.0.
  • NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S has no planned fix; migrate to a supported release or product and consult NetApp's end-of-support notice.
  • NetApp HCI Baseboard Management Controller (BMC) - H410C has no planned fix; migrate to a supported release or product and consult NetApp's end-of-support notice.
  • NetApp HCI Baseboard Management Controller (BMC) - H610C has no planned fix; migrate to a supported release or product and consult NetApp's end-of-support notice.
  • NetApp HCI Baseboard Management Controller (BMC) - H610S has no planned fix; migrate to a supported release or product and consult NetApp's end-of-support notice.
  • NetApp HCI Baseboard Management Controller (BMC) - H615C has no planned fix; migrate to a supported release or product and consult NetApp's end-of-support notice.
  • NetApp HCI Compute Node (Bootstrap OS) has no planned fix; migrate to a supported release or product and consult NetApp's end-of-support notice.
  • OnCommand Workflow Automation has no planned fix; migrate to a supported release or product and consult NetApp's end-of-support notice.
  • ONTAP tools for VMware vSphere 9 has no planned fix; migrate to a supported release or product and consult NetApp's end-of-support notice.
  • SnapManager for Hyper-V has no planned fix; migrate to a supported release or product and consult NetApp's end-of-support notice.

Official advisory · high-confidence parse· fetched 2 hours ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.

Sign in to join the discussion.