CVE-2022-37940
Medium
Description
Potential security vulnerabilities have been identified in the HPE FlexFabric 5700 Switch Series. These vulnerabilities could be remotely exploited to allow host header injection and URL redirection. HPE has made the following software to resolve the vulnerability in HPE FlexFabric 5700 Switch Series version R2432P61 or later.
SeverityMedium
CVSS5.3
Exploit probability—
ProductHpe Flexfabric 5700 40xg 2qsfp\+ Firmware
PublishedMar 22, 2023
First seenMar 22, 2023
How to fix
Update
- hpe flexfabric_5700_40xg_2qsfp\+_firmwarer2432p61 or later
- hpe flexfabric_5700_48g_4xg_2qsfp\+_firmwarer2432p61 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hpe flexfabric_5700_40xg_2qsfp\+_firmware | v < r2432p61 | r2432p61 |
| hpe flexfabric_5700_48g_4xg_2qsfp\+_firmware | v < r2432p61 | r2432p61 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.