PT-2023-13564 · Hewlett Packard · Hpe Flexfabric 5700 Switch Series

Published 2023-03-15 · Updated 2023-03-29 · CVE-2022-37940

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions HPE FlexFabric 5700 Switch Series versions prior to R2432P61

Description The issue concerns potential security vulnerabilities in the HPE FlexFabric 5700 Switch Series, which could be remotely exploited to allow host header injection and URL redirection.

Recommendations For HPE FlexFabric 5700 Switch Series versions prior to R2432P61, update to version R2432P61 or later to resolve the vulnerability.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2022-37940

Affected Products

Hpe Flexfabric 5700 Switch Series

References · 5

• https://osv.dev/vulnerability/CVE-2022-37940 · Vendor Advisory
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04398en_us · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-37940 · Security Note
• https://t.me/cibsecurity/60431 · Telegram Post
• https://t.me/cvenotify/46613 · Telegram Post