Cyber Resilience

CVE-2021-3772

Medium

Published: 02 March 2022

Published
02 March 2022
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
EPSS Score 0.0016 37.2th percentile
Risk Priority 13 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2021-3772 is a medium-severity Improper Validation of Integrity Check Value (CWE-354) vulnerability in Netapp E-Series Santricity Os Controller. Its CVSS base score is 6.5 (Medium).

Operationally, ranked at the 37.2th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP association through invalid chunks if the attacker knows the IP-addresses and port numbers being used and the attacker can send…

more

packets with spoofed IP addresses.

CWE(s)
CWE-354

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

linux
linux kernel
≤ 5.15.0
redhat
enterprise linux
8.0
debian
debian linux
10.0, 9.0
oracle
communications cloud native core binding support function
22.1.3
oracle
communications cloud native core network exposure function
22.1.1
oracle
communications cloud native core policy
22.2.0
netapp
e-series santricity os controller
11.0, 11.0.0, 11.20, 11.25, 11.30
netapp
solidfire \& hci management node
all versions
netapp
solidfire \& hci storage node
all versions
netapp
hci compute node
all versions
+8 more product configuration(s) — see NVD for full list

Mitigating Controls

Likely Mitigating Controls AI

Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.

SA-18 Tamper Resistance and Detection
addresses: CWE-354

Proper validation of integrity check values is required for reliable tamper detection, directly reducing undetected modification risks.

SC-21 Secure Name/Address Resolution Service (Recursive or Caching Resolver)
addresses: CWE-354

Requires validation of integrity check values on every resolution response, directly mitigating tampered or corrupted DNS data.

SC-33 Transmission Preparation Integrity
addresses: CWE-354

Control mandates proper validation of integrity values (checksums) on prepared data, making flawed validation of those checks ineffective for attackers.

SI-7 Software, Firmware, and Information Integrity
addresses: CWE-354

Requires use of proper integrity verification tools, reducing the chance an incorrect check value is accepted.

SR-9 Tamper Resistance and Detection
addresses: CWE-354

Requires proper validation of integrity mechanisms, directly mitigating flawed check-value handling.

References