VulnSocial

CVE-2021-42550PoC(netapp / cloud_manager)

LOWCVSS 6.6 · MEDIUM

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers.

netapp CVEsBack to dashboard
2.5/ 10 priority

Sources & remediation

Patch / fix
Exploit / PoC references
Vendor / third-party advisories
Weakness type (CWE)
CWE-502

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • cloud_manager
  • logback
  • satellite
  • service_level_manager

Threat summary

  • Public PoC is present in monitored signal
  • 1 mentions across 1 observed day

What's happening

  • PoC mentioned or linked in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
netappqosredhatsiemens
Products
cloud_managerlogbacksatelliteservice_level_managersinec_nmssnap_creator_framework

3 versions affected across 6 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-07-08: 1PoC Mentioned / Linked · 2026-07-08: 1Technical Details · 2026-07-08: 107-08
Signal classification1 categories
PoC
1100.0%
Full discourse1 post
  • Ctrl-Alt-Intel@ctrlaltintel
    PoC

    Example 2: hXXp://43.167.163[.]197:2080/ - File logback.xml contains POC for JDNI vulnerability in logback - Potentially linked to CVE-2021-42550 This one doesn't contain the vshell installation directory, but we can see the IP has been tagged as VShell C2 (4/8) https://t.co/T2kvu67G8x

    Post summary

    The message reports a POc for a JDNI logback vulnerability (CVE-2021-42550) and notes an IP recognized as a VShell C2, but it does not describe active exploitation, patches, or false positives.

    11040366
    1.4K followersView on X
CPE platform detail17 entries

17 of 17 entries

PartVendorProductVersionTarget SWTarget HW
Appnetappcloud_manager---
Appnetappservice_level_manager---
Appnetappsnap_creator_framework---
Appqoslogback---
Appqoslogback1.3.0--
Appqoslogback1.3.0--
Appqoslogback1.3.0--
Appqoslogback1.3.0--
Appqoslogback1.3.0--
Appqoslogback1.3.0--
Appqoslogback1.3.0--
Appqoslogback1.3.0--
Appqoslogback1.3.0--
Appqoslogback1.3.0--
Appqoslogback1.3.0--
Appredhatsatellite6.0--
Appsiemenssinec_nms---

Explore more

Back to dashboardnetapp CVEsqos CVEsredhat CVEscloud_manager vulnerabilities