CVE-2022-37928
First published: Thu Nov 03 2022(Updated: )
Insufficient Verification of Data Authenticity vulnerability in Hewlett Packard Enterprise HPE Nimble Storage Hybrid Flash Arrays and Nimble Storage Secondary Flash Arrays.
Credit: security-alert@hpe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| HPE SF100 | <5.2.1.900 | |
| HPE SF100 | =5.3.0.0 | |
| HPE SF100 Firmware | ||
| HPE SF300 | <5.2.1.900 | |
| HPE SF300 | =5.3.0.0 | |
| HPE SF300 Firmware | ||
| HPE HF60 Firmware | <5.2.1.900 | |
| HPE HF60 Firmware | =5.3.0.0 | |
| HPE Hf60c Firmware | ||
| Hpe Hf40c | <5.2.1.900 | |
| Hpe Hf40c | =5.3.0.0 | |
| HPE HF40 | ||
| HPE HF20 | <5.2.1.900 | |
| HPE HF20 | =5.3.0.0 | |
| HPE HF20 Firmware | ||
| HPE HF40 | <5.2.1.900 | |
| HPE HF40 | =5.3.0.0 | |
| HPE HF40 Firmware | ||
| HPE HF60 Firmware | <5.2.1.900 | |
| HPE HF60 Firmware | =5.3.0.0 | |
| HPE Hf | ||
| HPE HF20H | <5.2.1.900 | |
| HPE HF20H | =5.3.0.0 | |
| HPE HF20H Firmware | ||
| HPE HF20C | <5.2.1.900 | |
| HPE HF20C | =5.3.0.0 | |
| HPE HF20C Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2022-37928.
What is the severity of CVE-2022-37928?
The severity of CVE-2022-37928 is high with a severity value of 6.5.
Which software versions are affected by CVE-2022-37928?
The affected software versions are HPE Nimble Storage Hybrid Flash Arrays and Nimble Storage Secondary Flash Arrays with the following versions: sf100_firmware up to exclusive version 5.2.1.900, sf100_firmware version 5.3.0.0, sf300_firmware up to exclusive version 5.2.1.900, sf300_firmware version 5.3.0.0, hf60c_firmware up to exclusive version 5.2.1.900, hf60c_firmware version 5.3.0.0, hf40c_firmware up to exclusive version 5.2.1.900, hf40c_firmware version 5.3.0.0, hf20_firmware up to exclusive version 5.2.1.900, hf20_firmware version 5.3.0.0, hf40_firmware up to exclusive version 5.2.1.900, hf40_firmware version 5.3.0.0, hf60_firmware up to exclusive version 5.2.1.900, hf60_firmware version 5.3.0.0, hf20h_firmware up to exclusive version 5.2.1.900, hf20h_firmware version 5.3.0.0, and hf20c_firmware up to exclusive version 5.2.1.900, hf20c_firmware version 5.3.0.0.
How severe is CVE-2022-37928?
CVE-2022-37928 is classified as high severity with a severity value of 6.5.
How do I mitigate CVE-2022-37928?
To mitigate CVE-2022-37928, it is recommended to apply the necessary security patches provided by Hewlett Packard Enterprise (HPE). Please refer to the HPE support page for more information: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst04359en_us
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/author
- agent/references
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/hpe
- canonical/hpe sf100
- version/hpe sf100/5.3.0.0
- canonical/hpe sf100 firmware
- canonical/hpe sf300
- version/hpe sf300/5.3.0.0
- canonical/hpe sf300 firmware
- canonical/hpe hf60 firmware
- version/hpe hf60 firmware/5.3.0.0
- canonical/hpe hf60c firmware
- canonical/hpe hf40c
- version/hpe hf40c/5.3.0.0
- canonical/hpe hf40
- canonical/hpe hf20
- version/hpe hf20/5.3.0.0
- canonical/hpe hf20 firmware
- version/hpe hf40/5.3.0.0
- canonical/hpe hf40 firmware
- canonical/hpe hf
- canonical/hpe hf20h
- version/hpe hf20h/5.3.0.0
- canonical/hpe hf20h firmware
- canonical/hpe hf20c
- version/hpe hf20c/5.3.0.0
- canonical/hpe hf20c firmware