CVEvulnerability

CVE-2022-37928

6.5 MEDIUM Published 2022-12-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-12-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.0 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-345

Description

Insufficient Verification of Data Authenticity vulnerability in Hewlett Packard Enterprise HPE Nimble Storage Hybrid Flash Arrays and Nimble Storage Secondary Flash Arrays.

Affected configurations

• hpe sf100 firmware (< 5.2.1.900) • hpe sf100 firmware 5.3.0.0 • hpe sf300 firmware (< 5.2.1.900) • hpe sf300 firmware 5.3.0.0 • hpe hf60c firmware (< 5.2.1.900) • hpe hf60c firmware 5.3.0.0 • hpe hf40c firmware (< 5.2.1.900) • hpe hf40c firmware 5.3.0.0 • hpe hf20 firmware (< 5.2.1.900) • hpe hf20 firmware 5.3.0.0 • hpe hf40 firmware (< 5.2.1.900) • hpe hf40 firmware 5.3.0.0 • hpe hf60 firmware (< 5.2.1.900) • hpe hf60 firmware 5.3.0.0 • hpe hf20h firmware (< 5.2.1.900) • hpe hf20h firmware 5.3.0.0 • hpe hf20c firmware (< 5.2.1.900) • hpe hf20c firmware 5.3.0.0

Related

Weakness · CWE (1)

  • CWE-345 Insufficient Verification of Data Authenticity weakness

References