8

CVE-2022-37928

Insufficient Verification of Data Authenticity vulnerability in Hewlett Packard Enterprise HPE Nimble Storage Hybrid Flash Arrays and Nimble Storage Secondary Flash Arrays.

Data is provided by the National Vulnerability Database (NVD)
Hpe ≫ Sf100 Firmware SwEditionltsr Version < 5.2.1.900
   Hpe ≫ Sf100 Version-
Hpe ≫ Sf100 Firmware Version5.3.0.0 SwEdition-
   Hpe ≫ Sf100 Version-
Hpe ≫ Sf300 Firmware SwEditionltsr Version < 5.2.1.900
   Hpe ≫ Sf300 Version-
Hpe ≫ Sf300 Firmware Version5.3.0.0 SwEdition-
   Hpe ≫ Sf300 Version-
Hpe ≫ Hf60c Firmware SwEditionltsr Version < 5.2.1.900
   Hpe ≫ Hf60c Version-
Hpe ≫ Hf60c Firmware Version5.3.0.0 SwEdition-
   Hpe ≫ Hf60c Version-
Hpe ≫ Hf40c Firmware SwEditionltsr Version < 5.2.1.900
   Hpe ≫ Hf40c Version-
Hpe ≫ Hf40c Firmware Version5.3.0.0 SwEdition-
   Hpe ≫ Hf40c Version-
Hpe ≫ Hf20 Firmware SwEditionltsr Version < 5.2.1.900
   Hpe ≫ Hf20 Version-
Hpe ≫ Hf20 Firmware Version5.3.0.0 SwEdition-
   Hpe ≫ Hf20 Version-
Hpe ≫ Hf40 Firmware SwEditionltsr Version < 5.2.1.900
   Hpe ≫ Hf40 Version-
Hpe ≫ Hf40 Firmware Version5.3.0.0 SwEdition-
   Hpe ≫ Hf40 Version-
Hpe ≫ Hf60 Firmware SwEditionltsr Version < 5.2.1.900
   Hpe ≫ Hf60 Version-
Hpe ≫ Hf60 Firmware Version5.3.0.0 SwEdition-
   Hpe ≫ Hf60 Version-
Hpe ≫ Hf20h Firmware SwEditionltsr Version < 5.2.1.900
   Hpe ≫ Hf20h Version-
Hpe ≫ Hf20h Firmware Version5.3.0.0 SwEdition-
   Hpe ≫ Hf20h Version-
Hpe ≫ Hf20c Firmware SwEditionltsr Version < 5.2.1.900
   Hpe ≫ Hf20c Version-
Hpe ≫ Hf20c Firmware Version5.3.0.0 SwEdition-
   Hpe ≫ Hf20c Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.2% 0.422
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
security-alert@hpe.com 8 2.1 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CWE-345 Insufficient Verification of Data Authenticity

The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.