Medium severity · published Dec 12, 2022
CVE-2022-37930
A security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays and HPE Nimble Storage Secondary Flash Arrays which could potentially allow local disclosure…
5.5
CVSS
0.2%
EPSS
No
On KEV
Description
A security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays and HPE Nimble Storage Secondary Flash Arrays which could potentially allow local disclosure of sensitive information.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 6% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HF
Hf20 Firmware · Hpe
before 5.2.1.900; 5.3.0.0 · source: NVD
HF
Hf20c Firmware · Hpe
before 5.2.1.900; 5.3.0.0 · source: NVD
HF
Hf20h Firmware · Hpe
before 5.2.1.900; 5.3.0.0 · source: NVD
HF
Hf40 Firmware · Hpe
before 5.2.1.900; 5.3.0.0 · source: NVD
HF
Hf40c Firmware · Hpe
before 5.2.1.900; 5.3.0.0 · source: NVD
HF
Hf60 Firmware · Hpe
before 5.2.1.900; 5.3.0.0 · source: NVD
HF
Hf60c Firmware · Hpe
before 5.2.1.900; 5.3.0.0 · source: NVD
SF
Sf100 Firmware · Hpe
before 5.2.1.900; 5.3.0.0 · source: NVD
SF
Sf300 Firmware · Hpe
before 5.2.1.900; 5.3.0.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-37930
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-37930
Vendor Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst04361en_us
More from Hf20 Firmware
6.5
CVE-2022-37928
Insufficient Verification of Data Authenticity vulnerability in Hewlett Packard Enterprise HPE Nimble Storage Hybrid Flash Arrays and Nimble Storage Secondary Flash Arrays
5.5
CVE-2022-37929
Improper Privilege Management vulnerability in Hewlett Packard Enterprise Nimble Storage Hybrid Flash Arrays and Nimble Storage Secondary Flash Arrays