CVE-2022-28620

🗓️ 24 Jun 2022 15:00:10Reported by hpeType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 89 Views

Remote authentication bypass vulnerability in HPE Cray Legacy Shasta System Solutions, HPE Slingshot, and HPE Cray EX supercomputers

Reporter	Title	Published	Views	Family All 11
attackerkb	CVE-2022-28620	24 Jun 202215:15	–	attackerkb
CNNVD	HPE Cray Legacy Shasta 授权问题漏洞	24 Jun 202200:00	–	cnnvd
Cvelist	CVE-2022-28620	24 Jun 202215:00	–	cvelist
EUVD	EUVD-2022-33062	3 Oct 202520:07	–	euvd
HPE Security Bulletins	HPESBCR04284 rev.1 - HPE Cray EX Supercomputers, Cray Shasta System Solutions, and HPE Slingshot Switches, Remote Authentication Bypass	16 Jun 202200:00	–	hpe
NVD	CVE-2022-28620	24 Jun 202215:15	–	nvd
OSV	CVE-2022-28620	24 Jun 202215:15	–	osv
Prion	Authentication flaw	24 Jun 202215:15	–	prion
Positive Technologies	PT-2022-19108 · Hewlett Packard · Hpe Cray Ex Supercomputers +2	24 Jun 202200:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2022-28620: Undefined Security Weakness	24 Jun 202200:00	–	rapid7

NVD

Vulners

Node

AND

hpe slingshot_firmwareRange<1.7.2

hpe slingshotMatch-

Node

AND

hpe cray_ex_supercomputers_firmwareMatch1.4.27

hpe cray_ex_supercomputers_firmwareMatch1.5.33

hpe cray_ex_supercomputers_firmwareMatch1.6.27

hpe cray_ex_supercomputersMatch-

Node

AND

hpe cray_sh_supercomputer_air_cooled_base_system_code_firmwareMatch1.4.27

hpe cray_sh_supercomputer_air_cooled_base_system_code_firmwareMatch1.5.33

hpe cray_sh_supercomputer_air_cooled_base_system_code_firmwareMatch1.6.27

hpe cray_sh_supercomputer_air_cooled_base_system_codeMatch-

Node

AND

hpe cray_sh_supercomputer_liquid_cooled_base_system_code_firmwareMatch1.4.27

hpe cray_sh_supercomputer_liquid_cooled_base_system_code_firmwareMatch1.5.33

hpe cray_sh_supercomputer_liquid_cooled_base_system_code_firmwareMatch1.6.27

hpe cray_sh_supercomputer_liquid_cooled_base_system_codeMatch-

Node

AND

hpe cray_sh_supercomputer_liquid_cooled_tds_base_system_code_firmwareMatch1.4.27

hpe cray_sh_supercomputer_liquid_cooled_tds_base_system_code_firmwareMatch1.5.33

hpe cray_sh_supercomputer_liquid_cooled_tds_base_system_code_firmwareMatch1.6.27

hpe cray_sh_supercomputer_liquid_cooled_tds_base_system_codeMatch-

[
  {
    "product": "Cray Legacy Shasta System Solutions; HPE Slingshot; HPE Cray EX supercomputers",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All versions of node controller firmware associated with HPE Cray EX liquid cooled blades, and all versions of chassis controller firmware associated with HPE Cray EX liquid cooled cabinets prior to 1.6.27/1.5.33/1.4.27"
      },
      {
        "status": "affected",
        "version": "- All Slingshot versions prior to 1.7.2"
      },
      {
        "status": "affected",
        "version": "- All versions of node controller firmware associated with HPE Cray EX liquid cooled blades, and all versions of chassis controller firmware associated with HPE Cray EX liquid cooled cabinets prior to 1.6.27/1.5.33/1.4.27"
      }
    ]
  }
]