CVE-2022-23705
High
Description
A security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays, HPE Nimble Storage All Flash Arrays, and HPE Nimble Storage Secondary Flash Arrays which could potentially allow the upload, but not execution, of unauthorized update binaries to the array. HPE has made the following software updates to resolve the vulnerability in HPE Nimble Storage: 5.0.10.100 or later, 5.2.1.0 or later, 6.0.0.100 or later.
SeverityHigh
CVSS7.5
Exploit probability—
ProductHpe Nimbleos
PublishedMay 9, 2022
First seenMay 9, 2022
How to fix
Update
- hpe nimbleos5.0.10.100, 5.2.1.500 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hpe nimbleos | v < 5.0.10.100, 5.1.0.0 ≤ v < 5.2.1.500, 5.3.1.0 | 5.0.10.100, 5.2.1.500 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.