CVE-2022-28620

🗓️ 24 Jun 2022 15:00:10Reported by hpeType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 62 Views

Remote authentication bypass vulnerability in HPE Cray Legacy Shasta System Solutions, HPE Slingshot, and HPE Cray EX supercomputers

Reporter	Title	Published	Views	Family All 8
ATTACKERKB	CVE-2022-28620	24 Jun 202215:15	–	attackerkb
CNNVD	HPE Cray Legacy Shasta 授权问题漏洞	24 Jun 202200:00	–	cnnvd
Cvelist	CVE-2022-28620	24 Jun 202215:00	–	cvelist
EUVD	EUVD-2022-33062	3 Oct 202520:07	–	euvd
NVD	CVE-2022-28620	24 Jun 202215:15	–	nvd
Prion	Authentication flaw	24 Jun 202215:15	–	prion
Positive Technologies	PT-2022-19108 · Hewlett Packard · Hpe Cray Ex Supercomputers +2	24 Jun 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-28620	23 May 202501:04	–	redhatcve

NVD

Node

hpe slingshot_firmwareRange<1.7.2

AND

hpe slingshotMatch-

Node

hpe cray_ex_supercomputers_firmwareMatch1.4.27

hpe cray_ex_supercomputers_firmwareMatch1.5.33

hpe cray_ex_supercomputers_firmwareMatch1.6.27

AND

hpe cray_ex_supercomputersMatch-

Node

hpe cray_sh_supercomputer_air_cooled_base_system_code_firmwareMatch1.4.27

hpe cray_sh_supercomputer_air_cooled_base_system_code_firmwareMatch1.5.33

hpe cray_sh_supercomputer_air_cooled_base_system_code_firmwareMatch1.6.27

AND

hpe cray_sh_supercomputer_air_cooled_base_system_codeMatch-

Node

hpe cray_sh_supercomputer_liquid_cooled_base_system_code_firmwareMatch1.4.27

hpe cray_sh_supercomputer_liquid_cooled_base_system_code_firmwareMatch1.5.33

hpe cray_sh_supercomputer_liquid_cooled_base_system_code_firmwareMatch1.6.27

AND

hpe cray_sh_supercomputer_liquid_cooled_base_system_codeMatch-

Node

hpe cray_sh_supercomputer_liquid_cooled_tds_base_system_code_firmwareMatch1.4.27

hpe cray_sh_supercomputer_liquid_cooled_tds_base_system_code_firmwareMatch1.5.33

hpe cray_sh_supercomputer_liquid_cooled_tds_base_system_code_firmwareMatch1.6.27

AND

hpe cray_sh_supercomputer_liquid_cooled_tds_base_system_codeMatch-

[
  {
    "product": "Cray Legacy Shasta System Solutions; HPE Slingshot; HPE Cray EX supercomputers",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All versions of node controller firmware associated with HPE Cray EX liquid cooled blades, and all versions of chassis controller firmware associated with HPE Cray EX liquid cooled cabinets prior to 1.6.27/1.5.33/1.4.27"
      },
      {
        "status": "affected",
        "version": "- All Slingshot versions prior to 1.7.2"
      },
      {
        "status": "affected",
        "version": "- All versions of node controller firmware associated with HPE Cray EX liquid cooled blades, and all versions of chassis controller firmware associated with HPE Cray EX liquid cooled cabinets prior to 1.6.27/1.5.33/1.4.27"
      }
    ]
  }
]