topic Re: Is CVE-2021-42287's updates compatible with ONTAP 9？ in ONTAP Discussions

Is CVE-2021-42287's updates compatible with ONTAP 9？

JOEY_STORAGE — Wed, 04 Jun 2025 10:08:54 GMT

In November 9 2021, Microsoft release a monthly security update, which imporves authentication safaty described in CVE-2021-42287

I have a test in NAS lab:

1. Windows server 2019( with KB5007206): Set PacRequestorEnforcement registry value to “2” (Enforcement phase)

2. Ontap simulater 9.8P7: A SVM join AD domain with administator

It returns "join failed".

Trace packet shows an error about KPASSWD, seems that initiate the password of machine account

paul_stejskal — Mon, 15 Nov 2021 15:13:27 GMT

I am checking with NAS. Please open a case. This is news to us because there are zero cases on this, but good looking out.

Post the case # when done.

JOEY_STORAGE — Tue, 16 Nov 2021 03:12:15 GMT

Hi,

Case # 2008980660 is here, please update the Cause&Solution soon in KB

Thanks

andris — Sat, 28 May 2022 18:09:57 GMT

There are ONTAP fixes in various branches, as well as a workaround if an ONTAP upgrade is not possible at this time.