CVE-2022-37929

MEDIUM

HPE Nimble Storage Arrays < 5.2.1.900 - Privilege Management Issue

Title source: llm
STIX 2.1

Description

Improper Privilege Management vulnerability in Hewlett Packard Enterprise Nimble Storage Hybrid Flash Arrays and Nimble Storage Secondary Flash Arrays.

References (1)

Core 1

Scores

CVSS v3 6.7
EPSS 0.0004
EPSS Percentile 12.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-269
Status published
Products (18)
hpe/hf20_firmware 5.3.0.0
hpe/hf20_firmware < 5.2.1.900
hpe/hf20c_firmware 5.3.0.0
hpe/hf20c_firmware < 5.2.1.900
hpe/hf20h_firmware 5.3.0.0
hpe/hf20h_firmware < 5.2.1.900
hpe/hf40_firmware 5.3.0.0
hpe/hf40_firmware < 5.2.1.900
hpe/hf40c_firmware 5.3.0.0
hpe/hf40c_firmware < 5.2.1.900
... and 8 more
Published Dec 12, 2022
Tracked Since Feb 18, 2026