CVE-2022-23703: High severity hpe nimble storage vulnerability
A security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays, HPE Nimble Storage All Flash Arrays and HPE Nimble Storage Secondary Flash Arrays during update. This would potentially allow an attacker to intercept and modify network communication for software updates initiated by the Nimble appliance. The following NimbleOS versions, and all subsequent releases, contain a software fix for this vulnerability: 5.0.10.100, 5.2.1.500, 6.0.0.100
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-23703?
CVE-2022-23703 is a security vulnerability found in HPE Nimble Storage Hybrid Flash Arrays, HPE Nimble Storage All Flash Arrays, and HPE Nimble Storage Secondary Flash Arrays during software updates.
How does CVE-2022-23703 impact me?
CVE-2022-23703 potentially allows an attacker to intercept and modify network communication for software updates on affected HPE Nimble Storage products.
Which software versions are affected by CVE-2022-23703?
Software versions 5.0.10.100 up to, but excluding, 5.2.1.500, and version 5.3.1.0 of HPE Nimble Storage Hybrid Flash Arrays, HPE Nimble Storage All Flash Arrays, and HPE Nimble Storage Secondary Flash Arrays are affected by CVE-2022-23703.
What is the severity of CVE-2022-23703?
CVE-2022-23703 has a severity rating of 7.5, which is considered high.
How can I fix CVE-2022-23703?
To mitigate CVE-2022-23703, it is recommended to apply the necessary security updates provided by HPE for the affected software versions.