HPE Alert
2632Warning Date
Severity Level
Warning Number
Target Sector
7 April, 2022
● High
2022-4632
All
Description:
HPE has released a security update to address several vulnerabilities in the following products:
- Aruba Instant On 1930 switches firmware versions 1.0.7.0 and below when managed through the local web interface.
- HPE Nimble Storage Hybrid Flash Arrays - 5.3.1.0 and earlier, 5.2.1.400 and earlier and 5.0.10.0 and earlier
- Nimble Storage All Flash Arrays - 5.3.1.0 and earlier, 5.2.1.400 and earlier and 5.0.10.0 and earlier
- Nimble Storage Secondary Flash Arrays - 5.3.1.0 and earlier, 5.2.1.400 and earlier and 5.0.10.0 and earlier
Threats:
An attacker could exploit these vulnerabilities by doing the following:
- Denial of service attack (DoS)
Best practice and Recommendations:
The CERT team encourages users to review HPE security advisory and apply the necessary update: