deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-3485
Published: 2022-12-12
Description: In IFM Moneo Appliance with version up to 1.9.3 an unauthenticated remote attacker can reset the administrator password by only supplying the serial number and thus gain full control of the device.

CVSS Score: 9.8 (CRITICAL)
CWE: CWE-640
References: https://cert.vde.com/en/advisories/VDE-2022-050/; https://cert.vde.com/en/advisories/VDE-2022-050/
CVE: CVE-2021-3437
Published: 2022-12-12
Description: Potential security vulnerabilities have been identified in an OMEN Gaming Hub SDK package which may allow escalation of privilege and/or denial of service. HP is releasing software updates to mitigate the potential vulnerabilities.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-276
References: https://support.hp.com/us-en/document/ish_4[PII_REDACTED]112-16/hpsbgn03726; https://support.hp.com/us-en/document/ish_4[PII_REDACTED]112-16/hpsbgn03726
CVE: CVE-2021-3661
Published: 2022-12-12
Description: A potential security vulnerability has been identified in certain HP Workstation BIOS (UEFI firmware) which may allow arbitrary code execution. HP is releasing firmware mitigations for the potential vulnerability.
CVSS Score: 8.4 (HIGH)
CWE: CWE-94
References: https://support.hp.com/us-en/document/ish_5[PII_REDACTED]021-16/hpsbhf03770; https://support.hp.com/us-en/document/ish_5[PII_REDACTED]021-16/hpsbhf03770
CVE: CVE-2021-3821
Published: 2022-12-12
Description: A potential security vulnerability has been identified for certain HP multifunction printers (MFPs). The vulnerability may lead to Denial of Service when running HP Workpath solutions on potentially affected products.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-400
References: https://support.hp.com/us-en/document/ish_4[PII_REDACTED]823-16/hpsbpi03747; https://support.hp.com/us-en/document/ish_4[PII_REDACTED]823-16/hpsbpi03747
CVE: CVE-2021-3919
Published: 2022-12-12
Description: A potential security vulnerability has been identified in OMEN Gaming Hub and in HP Command Center which may allow escalation of privilege and/or denial of service. HP has released software updates to mitigate the potential vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: https://support.hp.com/us-en/document/ish_5[PII_REDACTED]162-16/hpsbgn03761; https://support.hp.com/us-en/document/ish_5[PII_REDACTED]162-16/hpsbgn03761
CVE: CVE-2021-3942
Published: 2022-12-12
Description: Certain HP Print products and Digital Sending products may be vulnerable to potential remote code execution and buffer overflow with use of Link-Local Multicast Name Resolution or LLMNR.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-119
References: https://support.hp.com/us-en/document/ish_5[PII_REDACTED]142-16/hpsbpi03780; https://support.hp.com/us-en/document/ish_5[PII_REDACTED]142-16/hpsbpi03780
CVE: CVE-2021-46846
Published: 2022-12-12
Description: Cross Site Scripting vulnerability in Hewlett Packard Enterprise Integrated Lights-Out 5.


CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04133en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04133en_us
CVE: CVE-2022-1038
Published: 2022-12-12
Description: A potential security vulnerability has been identified in the HP Jumpstart software, which might allow escalation of privilege. HP is recommending that customers uninstall HP Jumpstart and use myHP software.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://support.hp.com/us-en/document/ish_6[PII_REDACTED]528-16/hpsbhf03791; https://support.hp.com/us-en/document/ish_6[PII_REDACTED]528-16/hpsbhf03791
CVE: CVE-2022-22488
Published: 2022-12-12
Description: IBM OpenBMC OP910 and OP940 could allow a privileged user to cause a denial of service by uploading or deleting too many CA certificates in a short period of time.  IBM X-Force ID:  2226337.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-770, CWE-770
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/226337; https://www.ibm.com/support/pages/node/6840155; https://exchange.xforce.ibmcloud.com/vulnerabilities/226337
CVE: CVE-2022-23511
Published: 2022-12-12
Description: A privilege escalation issue exists within the Amazon CloudWatch Agent for Windows, software for collecting metrics and logs from Amazon EC2 instances and on-premises servers, in versions up to and including v1.247354. When users trigger a repair of the Agent, a pop-up window opens with SYSTEM permissions. Users with administrative access to affected hosts may use this to create a new command prompt as NT AUTHORITY\SYSTEM. To trigger this issue, the third party must be able to access the affected host and elevate their privileges such that they're able to trigger the agent repair process. They must also be able to install the tools required to trigger the issue. This issue does not affect the CloudWatch Agent for macOS or Linux. Agent users should upgrade to version 1.247355 of the CloudWatch Agent to address this issue. There is no recommended work around. Affected users must update the installed version of the CloudWatch Agent to address this issue.
CVSS Score: 7.1 (HIGH)
CWE: CWE-274
References: https://github.com/aws/amazon-cloudwatch-agent/commit/[PII_REDACTED]c317ff26f41f576c169148d1250837#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52; https://github.com/aws/amazon-cloudwatch-agent/security/advisories/GHSA-j8x2-2m5w-j939; https://github.com/aws/amazon-cloudwatch-agent/commit/[PII_REDACTED]c317ff26f41f576c169148d1250837#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52
CVE: CVE-2022-2794
Published: 2022-12-12
Description: Certain HP PageWide Pro Printers may be vulnerable to a potential denial of service attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://support.hp.com/us-en/document/ish_6[PII_REDACTED]411-16/hpsbpi03807; https://support.hp.com/us-en/document/ish_6[PII_REDACTED]411-16/hpsbpi03807
CVE: CVE-2022-32537
Published: 2022-12-12
Description: A vulnerability exists which could allow an unauthorized user to learn aspects of the communication protocol used to pair system components while the pump is being paired with other system components. Exploitation requires nearby wireless signal proximity with the patient and the device; advanced technical knowledge is required for exploitation. Please refer to the Medtronic Product Security Bulletin for guidance
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-693
References: https://www.cisa.gov/news-events/ics-medical-advisories/icsma-22-263-01; https://www.medtronic.com/en-us/e/product-security/security-bulletins/minimed-600-series-communication-issue.html; https://global.medtronic.com/xg-en/product-security/security-bulletins/minimed-600-series-communication-issue.html
CVE: CVE-2022-34318
Published: 2022-12-12
Description: 
IBM CICS TX 11.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 229461.


CVSS Score: 5.4 (MEDIUM)
CWE: CWE-1021, CWE-1021
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/229461; https://www.ibm.com/support/pages/node/6833186; https://www.ibm.com/support/pages/node/6833188
CVE: CVE-2022-37018
Published: 2022-12-12
Description: A potential vulnerability has been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerability.
CVSS Score: 8.4 (HIGH)
CWE: CWE-276
References: https://support.hp.com/us-en/document/ish_7[PII_REDACTED]970-16/hpsbhf03820; https://support.hp.com/us-en/document/ish_7[PII_REDACTED]970-16/hpsbhf03820
CVE: CVE-2022-37897
Published: 2022-12-12
Description: There is a command injection vulnerability that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-016.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-016.txt
CVE: CVE-2022-37898
Published: 2022-12-12
Description: Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system. 


CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-016.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-016.txt
CVE: CVE-2022-37899
Published: 2022-12-12
Description: Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system. 


CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-016.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-016.txt
CVE: CVE-2022-37900
Published: 2022-12-12
Description: Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system. 


CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-016.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-016.txt
CVE: CVE-2022-37901
Published: 2022-12-12
Description: Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system. 


CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-016.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-016.txt
CVE: CVE-2022-37902
Published: 2022-12-12
Description: Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system. 


CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-016.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-016.txt
CVE: CVE-2022-37903
Published: 2022-12-12
Description: A vulnerability exists that allows an authenticated attacker to overwrite an arbitrary file with attacker-controlled content via the web interface. Successful exploitation of this vulnerability could lead to full compromise the underlying host operating system.


CVSS Score: 7.2 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-016.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-016.txt
CVE: CVE-2022-37904
Published: 2022-12-12
Description: Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code during the boot sequence. Successful exploitation could allow an attacker to achieve permanent modification of the underlying operating system.


CVSS Score: 6.6 (MEDIUM)
CWE: CWE-123
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-016.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-016.txt
CVE: CVE-2022-37905
Published: 2022-12-12
Description: Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code during the boot sequence. Successful exploitation could allow an attacker to achieve permanent modification of the underlying operating system.


CVSS Score: 6.6 (MEDIUM)
CWE: CWE-1236
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-016.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-016.txt
CVE: CVE-2022-37906
Published: 2022-12-12
Description: An authenticated path traversal vulnerability exists in the ArubaOS command line interface. Successful exploitation of the vulnerability results in the ability to delete arbitrary files on the underlying operating system.


CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-016.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-016.txt
CVE: CVE-2022-37907
Published: 2022-12-12
Description: A vulnerability exists in the ArubaOS bootloader on 7xxx series controllers which can result in a denial of service (DoS) condition on an impacted system. A successful attacker can cause a system hang which can only be resolved via a power cycle of the impacted controller. 


CVSS Score: 5.8 (MEDIUM)
CWE: CWE-400
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-016.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-016.txt
CVE: CVE-2022-37908
Published: 2022-12-12
Description: An authenticated attacker can impact the integrity of the ArubaOS bootloader on 7xxx series controllers. Successful exploitation can compromise the hardware chain of trust on the impacted controller.


CVSS Score: 5.8 (MEDIUM)
CWE: CWE-494
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-016.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-016.txt
CVE: CVE-2022-37909
Published: 2022-12-12
Description: Aruba has identified certain configurations of ArubaOS that can lead to sensitive information disclosure from the configured ESSIDs. The scenarios in which disclosure of potentially sensitive information can occur are complex, and depend on factors beyond the control of attackers.


CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-016.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-016.txt
CVE: CVE-2022-37910
Published: 2022-12-12
Description: A buffer overflow vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability results in a denial of service on the affected system.


CVSS Score: 4.4 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-016.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-016.txt
CVE: CVE-2022-37911
Published: 2022-12-12
Description: Due to improper restrictions on XML entities multiple vulnerabilities exist in the command line interface of ArubaOS. A successful exploit could allow an authenticated attacker to retrieve files from the local system or cause the application to consume system resources, resulting in a denial of service condition.


CVSS Score: 3.8 (LOW)
CWE: CWE-611, CWE-611
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-016.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-016.txt
CVE: CVE-2022-37912
Published: 2022-12-12
Description: Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system. 


CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-016.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-016.txt
CVE: CVE-2022-37919
Published: 2022-12-12
Description: A vulnerability exists in the API of Aruba EdgeConnect Enterprise. An unauthenticated attacker can exploit this condition via the web-based management interface to create a denial-of-service condition which prevents the appliance from properly responding to API requests in Aruba EdgeConnect Enterprise Software version(s): ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 and below; ECOS 8.3.7.1 and below;


CVSS Score: 7.5 (HIGH)
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-018.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-018.txt
CVE: CVE-2022-37920
Published: 2022-12-12
Description: Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise in Aruba EdgeConnect Enterprise Software version(s): ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 and below; ECOS 8.3.7.1 and below.


CVSS Score: 7.2 (HIGH)
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-018.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-018.txt
CVE: CVE-2022-37921
Published: 2022-12-12
Description: Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise in Aruba EdgeConnect Enterprise Software version(s): ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 and below; ECOS 8.3.7.1 and below.


CVSS Score: 7.2 (HIGH)
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-018.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-018.txt
CVE: CVE-2022-37922
Published: 2022-12-12
Description: Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise in Aruba EdgeConnect Enterprise Software version(s): ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 and below; ECOS 8.3.7.1 and below.


CVSS Score: 7.2 (HIGH)
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-018.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-018.txt
CVE: CVE-2022-37923
Published: 2022-12-12
Description: Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise in Aruba EdgeConnect Enterprise Software version(s): ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 and below; ECOS 8.3.7.1 and below.


CVSS Score: 7.2 (HIGH)
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-018.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-018.txt
CVE: CVE-2022-37924
Published: 2022-12-12
Description: Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise in Aruba EdgeConnect Enterprise Software version(s): ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 and below; ECOS 8.3.7.1 and below.


CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-018.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-018.txt
CVE: CVE-2022-37925
Published: 2022-12-12
Description: A vulnerability within the web-based management interface of Aruba EdgeConnect Enterprise could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface in Aruba EdgeConnect Enterprise Software version(s): ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 and below; ECOS 8.3.7.1 and below.


CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-018.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-018.txt
CVE: CVE-2022-37926
Published: 2022-12-12
Description: A vulnerability within the web-based management interface of EdgeConnect Enterprise could allow a remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface by uploading a specially crafted file. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface in Aruba EdgeConnect Enterprise Software version(s): ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 and below; ECOS 8.3.7.1 and below.


CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-018.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-018.txt
CVE: CVE-2022-37927
Published: 2022-12-12
Description: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Hewlett Packard Enterprise HPE OneView Global Dashboard (OVGD).


CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04370en_us; https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04370en_us
CVE: CVE-2022-37928
Published: 2022-12-12
Description: Insufficient Verification of Data Authenticity vulnerability in Hewlett Packard Enterprise HPE Nimble Storage Hybrid Flash Arrays and Nimble Storage Secondary Flash Arrays.


CVSS Score: 8.0 (HIGH)
CWE: CWE-345, CWE-345
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst04359en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst04359en_us
CVE: CVE-2022-37929
Published: 2022-12-12
Description: Improper Privilege Management vulnerability in Hewlett Packard Enterprise Nimble Storage Hybrid Flash Arrays and Nimble Storage Secondary Flash Arrays.


CVSS Score: 6.7 (MEDIUM)
CWE: CWE-269, CWE-269
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst04360en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst04360en_us
CVE: CVE-2022-37930
Published: 2022-12-12
Description: A security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays and HPE Nimble Storage Secondary Flash Arrays which could potentially allow local disclosure of sensitive information.


CVSS Score: 6.7 (MEDIUM)
CWE: CWE-200
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst04361en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst04361en_us
CVE: CVE-2022-37932
Published: 2022-12-12
Description: A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches. The vulnerability could be remotely exploited to allow authentication bypass. HPE has made the following software updates to resolve the vulnerability in Hewlett Packard Enterprise OfficeConnect 1820, 1850 and 1920S Network switches versions: Prior to PT.02.14; Prior to PC.01.22; Prior to PO.01.21; Prior to PD.02.22;


CVSS Score: 8.8 (HIGH)
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04383en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04383en_us