CVE-2022-23705

CVE-2022-23705 affects HPE Nimble Storage Hybrid Flash Arrays, All Flash Arrays, and Secondary Flash Arrays. The vulnerability could allow the upload of unauthorized update binaries to the array, but not their execution. Publicly documented exploitation details are not provided in these sources. ...

CVE-2022-28618

CVE-2022-28618 concerns HPE Nimble Storage products (Hybrid Flash Arrays, All Flash Arrays, and Secondary Flash Arrays) where a command-injection vulnerability could allow an attacker to execute arbitrary commands on a Nimble appliance. The underlying issue is a vulnerability in the storage appli...

CVE-2022-23703

CVE-2022-23703 affects HPE Nimble Storage Hybrid Flash Arrays, All Flash Arrays, and Secondary Flash Arrays during software updates. The vulnerability could allow an attacker to intercept and modify update-network communications. Remediation: upgrade to NimbleOS 5.0.10.100, 5.2.1.500, 6.0.0.100 o...

CVE-2020-7138

CVE-2020-7138 affects HPE Nimble Storage NimbleOS; potential remote code execution could grant elevated privileges on the array. Vulnerable firmware versions include NimbleOS 3.9.3.0, 4.5.6.0, 5.0.9.0, and 5.1.4.100, with fixes and subsequent releases addressing the issue. Affected products: HPE ...

CVE-2019-11996

CVE-2019-11996 is a vulnerability in HPE Nimble Storage systems in multi-array group configurations that could allow an attacker to gain elevated privileges on the array. The fix is available in NimbleOS versions 3.9.2.0, 4.5.5.0, 5.0.8.0 and 5.1.3.0 (and later releases). Exploitation details are...

CVE-2020-7139

CVE-2020-7139 affects HPE Nimble Storage systems running NimbleOS. Affected versions include pre-fix releases; a software fix is provided in NimbleOS versions 3.9.3.0, 4.5.6.0, 5.0.9.0, and 5.1.4.100. The CVSS metrics indicate a network-based, high-severity issue with partial confidentiality and ...