VYPR
← All advisories
Medium severity6.7NVD Advisory· Published Dec 12, 2022· Updated Jun 17, 2026

CVE-2022-37930

CVE-2022-37930

Description

A security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays and HPE Nimble Storage Secondary Flash Arrays which could potentially allow local disclosure of sensitive information.

Affected products

21
  • HPE/Hf20 Firmware2 versions
    cpe:2.3:o:hpe:hf20_firmware:*:*:*:*:ltsr:*:*:*+ 1 more
    • cpe:2.3:o:hpe:hf20_firmware:*:*:*:*:ltsr:*:*:*range: <5.2.1.900
    • cpe:2.3:o:hpe:hf20_firmware:5.3.0.0:*:*:*:-:*:*:*
  • HPE/Hf20c Firmware2 versions
    cpe:2.3:o:hpe:hf20c_firmware:*:*:*:*:ltsr:*:*:*+ 1 more
    • cpe:2.3:o:hpe:hf20c_firmware:*:*:*:*:ltsr:*:*:*range: <5.2.1.900
    • cpe:2.3:o:hpe:hf20c_firmware:5.3.0.0:*:*:*:-:*:*:*
  • HPE/Hf20h Firmware2 versions
    cpe:2.3:o:hpe:hf20h_firmware:*:*:*:*:ltsr:*:*:*+ 1 more
    • cpe:2.3:o:hpe:hf20h_firmware:*:*:*:*:ltsr:*:*:*range: <5.2.1.900
    • cpe:2.3:o:hpe:hf20h_firmware:5.3.0.0:*:*:*:-:*:*:*
  • HPE/Hf40 Firmware2 versions
    cpe:2.3:o:hpe:hf40_firmware:*:*:*:*:ltsr:*:*:*+ 1 more
    • cpe:2.3:o:hpe:hf40_firmware:*:*:*:*:ltsr:*:*:*range: <5.2.1.900
    • cpe:2.3:o:hpe:hf40_firmware:5.3.0.0:*:*:*:-:*:*:*
  • HPE/Hf40c Firmware2 versions
    cpe:2.3:o:hpe:hf40c_firmware:*:*:*:*:ltsr:*:*:*+ 1 more
    • cpe:2.3:o:hpe:hf40c_firmware:*:*:*:*:ltsr:*:*:*range: <5.2.1.900
    • cpe:2.3:o:hpe:hf40c_firmware:5.3.0.0:*:*:*:-:*:*:*
  • HPE/Hf60 Firmware2 versions
    cpe:2.3:o:hpe:hf60_firmware:*:*:*:*:ltsr:*:*:*+ 1 more
    • cpe:2.3:o:hpe:hf60_firmware:*:*:*:*:ltsr:*:*:*range: <5.2.1.900
    • cpe:2.3:o:hpe:hf60_firmware:5.3.0.0:*:*:*:-:*:*:*
  • HPE/Hf60c Firmware2 versions
    cpe:2.3:o:hpe:hf60c_firmware:*:*:*:*:ltsr:*:*:*+ 1 more
    • cpe:2.3:o:hpe:hf60c_firmware:*:*:*:*:ltsr:*:*:*range: <5.2.1.900
    • cpe:2.3:o:hpe:hf60c_firmware:5.3.0.0:*:*:*:-:*:*:*
  • HPE/Sf100 Firmware2 versions
    cpe:2.3:o:hpe:sf100_firmware:*:*:*:*:ltsr:*:*:*+ 1 more
    • cpe:2.3:o:hpe:sf100_firmware:*:*:*:*:ltsr:*:*:*range: <5.2.1.900
    • cpe:2.3:o:hpe:sf100_firmware:5.3.0.0:*:*:*:-:*:*:*
  • HPE/Sf300 Firmware2 versions
    cpe:2.3:o:hpe:sf300_firmware:*:*:*:*:ltsr:*:*:*+ 1 more
    • cpe:2.3:o:hpe:sf300_firmware:*:*:*:*:ltsr:*:*:*range: <5.2.1.900
    • cpe:2.3:o:hpe:sf300_firmware:5.3.0.0:*:*:*:-:*:*:*
  • HPE/Nimble Storage Hybrid Flash Arraysllm-create
  • HPE/Nimble Storage Secondary Flash Arraysllm-create
  • Hewlett Packard Enterprise (HPE)/HPE Nimble Storage Hybrid Flash Arrays; Nimble Storage Secondary Flash Arraysv5
    Range: Prior to 5.2.1.900 (LTSR), 5.3.0.0 (GA)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.