PT-2022-24159 · Hewlett Packard · Hpe Nimble Storage Hybrid Flash Arrays+1

Published 2022-11-03 · Updated 2022-12-14 · CVE-2022-37928

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HPE Nimble Storage Hybrid Flash Arrays (affected versions not specified) HPE Nimble Storage Secondary Flash Arrays (affected versions not specified)

Description The issue is related to Insufficient Verification of Data Authenticity. It affects Hewlett Packard Enterprise HPE Nimble Storage Hybrid Flash Arrays and Nimble Storage Secondary Flash Arrays.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-345

Related Identifiers

CVE-2022-37928

Affected Products

Hpe Nimble Storage Hybrid Flash Arrays

Hpe Nimble Storage Secondary Flash Arrays

References · 4

• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst04359en_us · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-37928 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-37928 · Security Note
• https://t.me/cvenotify/39882 · Telegram Post