CVEvulnerability

CVE-2022-37940

6.1 MEDIUM Published 2023-03-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-03-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS 3.1 ([email protected])
6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-601

Description

Potential security vulnerabilities have been identified in the HPE FlexFabric 5700 Switch Series. These vulnerabilities could be remotely exploited to allow host header injection and URL redirection. HPE has made the following software to resolve the vulnerability in HPE FlexFabric 5700 Switch Series version R2432P61 or later.

Affected configurations

• hpe flexfabric 5700 40xg 2qsfp\+ firmware (< r2432p61) • hpe flexfabric 5700 48g 4xg 2qsfp\+ firmware (< r2432p61)

Related

Weakness · CWE (1)

  • CWE-601 URL Redirection to Untrusted Site weakness

References