CVE-2022-37929
First published: Thu Nov 03 2022(Updated: )
Improper Privilege Management vulnerability in Hewlett Packard Enterprise Nimble Storage Hybrid Flash Arrays and Nimble Storage Secondary Flash Arrays.
Credit: security-alert@hpe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| <5.2.1.900 | ||
| =5.3.0.0 | ||
| <5.2.1.900 | ||
| =5.3.0.0 | ||
| <5.2.1.900 | ||
| =5.3.0.0 | ||
| <5.2.1.900 | ||
| =5.3.0.0 | ||
| <5.2.1.900 | ||
| =5.3.0.0 | ||
| <5.2.1.900 | ||
| =5.3.0.0 | ||
| <5.2.1.900 | ||
| =5.3.0.0 | ||
| <5.2.1.900 | ||
| =5.3.0.0 | ||
| <5.2.1.900 | ||
| =5.3.0.0 | ||
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2022-37929.
What is the title of the vulnerability?
The title of the vulnerability is Improper Privilege Management vulnerability in Hewlett Packard Enterprise Nimble Storage Hybrid Flash Arrays and Nimble Storage Secondary Flash Arrays.
What is the severity of CVE-2022-37929?
The severity of CVE-2022-37929 is medium with a severity value of 5.5.
Which software versions are affected by this vulnerability?
The affected software versions are HPE SF100 Firmware up to version 5.2.1.900, HPE SF100 Firmware version 5.3.0.0, HPE SF300 Firmware up to version 5.2.1.900, HPE SF300 Firmware version 5.3.0.0, HPE HF60C Firmware up to version 5.2.1.900, HPE HF60C Firmware version 5.3.0.0, HPE HF40C Firmware up to version 5.2.1.900, HPE HF40C Firmware version 5.3.0.0, HPE HF20 Firmware up to version 5.2.1.900, HPE HF20 Firmware version 5.3.0.0, HPE HF40 Firmware up to version 5.2.1.900, HPE HF40 Firmware version 5.3.0.0, HPE HF60 Firmware up to version 5.2.1.900, HPE HF60 Firmware version 5.3.0.0, HPE HF20H Firmware up to version 5.2.1.900, HPE HF20H Firmware version 5.3.0.0, HPE HF20C Firmware up to version 5.2.1.900, and HPE HF20C Firmware version 5.3.0.0.
How can I fix CVE-2022-37929?
To fix CVE-2022-37929, it is recommended to update the affected software to a version that is not vulnerable.
- collector/nvd-index
- agent/author
- agent/severity
- agent/references
- agent/weakness
- agent/type
- agent/description
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- agent/event
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/hpe