H610S Firmware
1 CVEs
product
Monthly
When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. Rated low severity (CVSS 3.4), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.
Information Disclosure
Curl
Element Software
Ontap
Ontap Select Deploy Administration Utility
+12
NVD
CVSS 3.1
3.4
EPSS
0.3%
CVE-2025-0167
EPSS 0%
CVSS 3.4
LOW
POC
Monitor
When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. Rated low severity (CVSS 3.4), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.
Information Disclosure
Curl
Element Software
+14
NVD