Main Vulnerability Database Vulnerabilities #VU109920

Insufficient verification of data authenticity in Nimble Storage Secondary Flash Array and Nimble Storage Hybrid Flash Arrays - CVE-2022-37928

Published: May 29, 2025

Vulnerability identifier: #VU109920

CSH Severity: Medium

CVSS v4: 8.5 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-37928

CWE-ID: CWE-345

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to an insufficient verification of data authenticity. A remote user can trigger the vulnerability and execute arbitrary code on the target system.

Affected software

Nimble Storage Secondary Flash Array
Nimble Storage Hybrid Flash Arrays

How to mitigate CVE-2022-37928

Install updates from vendor's website.

Nimble Storage Secondary Flash Array - addressed in versions 5.2.1.900, 5.3.0.0
Nimble Storage Hybrid Flash Arrays - addressed in versions 5.2.1.900, 5.3.0.0

External References

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst04359en_us

Related Security Bulletins