Home / Security / Advisories / NTAP-20250214-0001

NTAP-20250214-0001 — CVE-2024-12797 OpenSSL Vulnerability in NetApp Products

Published 2025-02-14 · Updated 2026-06-19 · Status: Interim · Exploitation: Public · Severity: not scored · ONTAP affected: No — other NetApp product

Official advisory: NTAP-20250214-0001 on security.netapp.com ↗. Affected versions, fixed releases, and workarounds live there — this page is a summary.

Product family: Brocade SAN firmware · SolidFire / NetApp HCI · SnapManager / Snap utilities · Other NetApp products | other NetApp product

CVEs in this advisory

CVE-2024-12797 · site index

Impact

Successful exploitation of this vulnerability could lead to disclosure of sensitive information or addition or modification of data. <br> Brocade Fabric Operating System Firmware:<br> Affected only in version 10.0.

Affected products

Brocade Fabric Operating System Firmware
NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S
NetApp HCI Baseboard Management Controller (BMC) - H410C
NetApp HCI Baseboard Management Controller (BMC) - H610C
NetApp HCI Baseboard Management Controller (BMC) - H610S
NetApp HCI Baseboard Management Controller (BMC) - H615C
NetApp HCI Compute Node (Bootstrap OS)
SnapManager for Hyper-V
Global File Cache

References

https://openssl-library.org/news/secadv/20250211.txt ↗

What to do

Compare your installed product and version against the affected list above and the official advisory's affected-versions table.
Apply the fixed release named in the official advisory, or the documented workaround if no fix ships yet.
Limit management-plane exposure (BMC/management interfaces, web UIs, SNMP) until patched.
Track follow-ups in the site CVE index and the security RSS feed.