{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/ontap-tools-for-vmware-vsphere--10.5p2/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"id":"CVE-2023-28840"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["ONTAP tools for VMware vSphere (\u003c 10.5P2)","Astra Control Provisioner"],"_cs_severities":["medium"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["NetApp"],"content_html":"\u003cp\u003eA vulnerability has been identified in NetApp ONTAP tools for VMware vSphere 10, identified as CVE-2023-28840. The flaw allows a remote attacker to cause a denial of service and negatively impact data integrity. NetApp has released a patch for the ONTAP tools suite, but explicitly stated that no fix is planned for the associated Astra Control Provisioner component.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for remote denial of service and unauthorized modification of data integrity within the targeted management environment.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade NetApp ONTAP tools for VMware vSphere 10 to version 10.5P2 or later to mitigate the vulnerability.\u003c/li\u003e\n\u003cli\u003eFor users of Astra Control Provisioner, acknowledge that no patch is available and review internal compensating controls, such as network isolation or restrictive access control lists, to limit exposure to this component.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-12T16:25:35Z","date_published":"2026-11-12T16:25:35Z","id":"https://feed.craftedsignal.io/briefs/2026-11-netapp-ontap-tools-cve-2023-28840/","summary":"A vulnerability in NetApp ONTAP tools for VMware vSphere 10 (CVE-2023-28840) allows a remote attacker to trigger a denial of service and compromise data integrity, with no fix planned for the Astra Control Provisioner component.","title":"NetApp ONTAP tools for VMware vSphere: Remote denial of service and data integrity impact (CVE-2023-28840)","url":"https://feed.craftedsignal.io/briefs/2026-11-netapp-ontap-tools-cve-2023-28840/"}],"language":"en","title":"CraftedSignal Threat Feed - ONTAP Tools for VMware VSphere (\u003c 10.5P2)","version":"https://jsonfeed.org/version/1.1"}