CVE-2022-37928

HIGH

HPE Nimble Storage Hybrid/Secondary Flash Arrays < 5.2.1.900 Data Authenticity Verification Issue

Title source: llm
STIX 2.1

Description

Insufficient Verification of Data Authenticity vulnerability in Hewlett Packard Enterprise HPE Nimble Storage Hybrid Flash Arrays and Nimble Storage Secondary Flash Arrays.

References (1)

Core 1

Scores

CVSS v3 8.0
EPSS 0.0014
EPSS Percentile 33.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-345
Status published
Products (18)
hpe/hf20_firmware 5.3.0.0
hpe/hf20_firmware < 5.2.1.900
hpe/hf20c_firmware 5.3.0.0
hpe/hf20c_firmware < 5.2.1.900
hpe/hf20h_firmware 5.3.0.0
hpe/hf20h_firmware < 5.2.1.900
hpe/hf40_firmware 5.3.0.0
hpe/hf40_firmware < 5.2.1.900
hpe/hf40c_firmware 5.3.0.0
hpe/hf40c_firmware < 5.2.1.900
... and 8 more
Published Dec 12, 2022
Tracked Since Feb 18, 2026