CVE-2022-37940

CVSS V2 None CVSS V3 None
Description
Potential security vulnerabilities have been identified in the HPE FlexFabric 5700 Switch Series. These vulnerabilities could be remotely exploited to allow host header injection and URL redirection. HPE has made the following software to resolve the vulnerability in HPE FlexFabric 5700 Switch Series version R2432P61 or later.
Overview
  • CVE ID
  • CVE-2022-37940
  • Assigner
  • security-alert@hpe.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2023-03-22T06:15:09
  • Last Modified Date
  • 2023-03-29T13:18:08
Weakness Enumerations
CWE URL
CWE-601 http://cwe.mitre.org/data/definitions/601.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:o:hpe:flexfabric_5700_40xg_2qsfp\+_firmware:*:*:*:*:*:*:*:* 1 OR r2432p61
cpe:2.3:h:hpe:flexfabric_5700_40xg_2qsfp\+:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:hpe:flexfabric_5700_48g_4xg_2qsfp\+_firmware:*:*:*:*:*:*:*:* 1 OR r2432p61
cpe:2.3:h:hpe:flexfabric_5700_48g_4xg_2qsfp\+:-:*:*:*:*:*:*:* 0 OR
References
Reference URL Reference Tags
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04398en_us Vendor Advisory
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2022-37940
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37940
History
Created Old Value New Value Data Type Notes
2023-04-17 03:05:37 Added to TrackCVE
2023-04-17 03:05:38 Weakness Enumeration new