6.5

CVE-2022-37928

Insufficient Verification of Data Authenticity vulnerability in Hewlett Packard Enterprise HPE Nimble Storage Hybrid Flash Arrays and Nimble Storage Secondary Flash Arrays.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hpe ≫ Sf100 Firmware SwEdition ltsr Version < 5.2.1.900
   Hpe ≫ Sf100 Version -
Hpe ≫ Sf100 Firmware Version 5.3.0.0 SwEdition -
   Hpe ≫ Sf100 Version -
Hpe ≫ Sf300 Firmware SwEdition ltsr Version < 5.2.1.900
   Hpe ≫ Sf300 Version -
Hpe ≫ Sf300 Firmware Version 5.3.0.0 SwEdition -
   Hpe ≫ Sf300 Version -
Hpe ≫ Hf60c Firmware SwEdition ltsr Version < 5.2.1.900
   Hpe ≫ Hf60c Version -
Hpe ≫ Hf60c Firmware Version 5.3.0.0 SwEdition -
   Hpe ≫ Hf60c Version -
Hpe ≫ Hf40c Firmware SwEdition ltsr Version < 5.2.1.900
   Hpe ≫ Hf40c Version -
Hpe ≫ Hf40c Firmware Version 5.3.0.0 SwEdition -
   Hpe ≫ Hf40c Version -
Hpe ≫ Hf20 Firmware SwEdition ltsr Version < 5.2.1.900
   Hpe ≫ Hf20 Version -
Hpe ≫ Hf20 Firmware Version 5.3.0.0 SwEdition -
   Hpe ≫ Hf20 Version -
Hpe ≫ Hf40 Firmware SwEdition ltsr Version < 5.2.1.900
   Hpe ≫ Hf40 Version -
Hpe ≫ Hf40 Firmware Version 5.3.0.0 SwEdition -
   Hpe ≫ Hf40 Version -
Hpe ≫ Hf60 Firmware SwEdition ltsr Version < 5.2.1.900
   Hpe ≫ Hf60 Version -
Hpe ≫ Hf60 Firmware Version 5.3.0.0 SwEdition -
   Hpe ≫ Hf60 Version -
Hpe ≫ Hf20h Firmware SwEdition ltsr Version < 5.2.1.900
   Hpe ≫ Hf20h Version -
Hpe ≫ Hf20h Firmware Version 5.3.0.0 SwEdition -
   Hpe ≫ Hf20h Version -
Hpe ≫ Hf20c Firmware SwEdition ltsr Version < 5.2.1.900
   Hpe ≫ Hf20c Version -
Hpe ≫ Hf20c Firmware Version 5.3.0.0 SwEdition -
   Hpe ≫ Hf20c Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.29% 0.21
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
HPE 8 2.1 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CWE-345 Insufficient Verification of Data Authenticity

The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst04359en_us
Vendor Advisory