Vulnerability record · CVE-2016-6667 · published 7 February 2017

CVE-2016-6667: Netapp oncommand unified manager for clustered data ontap vulnerability

NNetapp · Oncommand Unified Manager For Clustered Data Ontap

NetApp OnCommand Unified Manager for Clustered Data ONTAP 6.3 through 6.4P1 contain a default privileged account, which allows remote attackers to execute arbitrary code via unspecified vectors.

9.8 CVSS 3.0 Critical EPSS 2.9% · top 13.4%

9.8CVSS 3.0 base score, v2 7.5

2.9%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

2References

17 Jun 2026Last modified by NVD

Description

NetApp OnCommand Unified Manager for Clustered Data ONTAP 6.3 through 6.4P1 contain a default privileged account, which allows remote attackers to execute arbitrary code via unspecified vectors.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

NOncommand Unified Manager For Clustered Data Ontap Netapp

References

Link	Tags
https://kb.netapp.com/support/s/article/NTAP-20161017-0002	PatchVendor Advisory
https://kb.netapp.com/support/s/article/NTAP-20161017-0002	PatchVendor Advisory

Track CVE-2016-6667 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.0CVE-2016-5195Linux Kernel Dirty COW Race Condition Privilege EscalationA race condition in the Linux kernel's mm/gup.c mishandles copy-on-write, letting a local user write to read-only memory mappings. This breaks the re…KEVEPSS 84%analysed10 Nov 2016 7.5CVE-2017-14053Netapp oncommand unified manager for clustered data ontap information exposure vulnerabilityNetApp OnCommand Unified Manager for Clustered Data ONTAP before 7.2P1 does not set the secure flag for an unspecified cookie in an HTTPS session, wh…EPSS 1.8%1 Sep 2017 5.3CVE-2016-2518Ntp out-of-bounds read vulnerabilityThe MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an add…EPSS 15%30 Jan 2017

Source: NIST National Vulnerability Database (record CVE-2016-6667), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.