VYPR
← All advisories
High severity8.8NVD Advisory· Published May 19, 2020· Updated Jun 17, 2026

CVE-2020-7138

CVE-2020-7138

Description

Potential remote code execution security vulnerabilities have been identified with HPE Nimble Storage systems that could be exploited by an attacker to gain elevated privileges on the array. The following NimbleOS versions, and all subsequent releases, contain a software fix for this vulnerability: 3.9.3.0 4.5.6.0 5.0.9.0 5.1.4.100

Affected products

2
  • HPE/NimbleOS
    cpe:2.3:o:hpe:nimbleos:*:*:*:*:*:*:*:*
    Range: >=3.1.0.0,<=3.9.3.0
  • HPE/Nimble Storagellm-fuzzy
    Range: prior to 3.9.3.0, 4.5.6.0, 5.0.9.0, 5.1.4.100

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.