← Back

CVE-2022-37940

nvd nist
Published: Mar 22, 2023Modified: Jun 17, 2026

JSON object

Loading...
6.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Exploitability: 2.8 / Impact: 2.7
Source: NVD

Description

Potential security vulnerabilities have been identified in the HPE FlexFabric 5700 Switch Series. These vulnerabilities could be remotely exploited to allow host header injection and URL redirection. HPE has made the following software to resolve the vulnerability in HPE FlexFabric 5700 Switch Series version R2432P61 or later.

Affected (2)

Hpe
2 products
Flexfabric 5700 40xg 2qsfp+ Firmware
Flexfabric 5700 48g 4xg 2qsfp+ Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Flexfabric 5700 40xg 2qsfp+ Firmware
Before r2432p61
Running on/withPlatform Versions
Hpe
Flexfabric 5700 40xg 2qsfp+
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Flexfabric 5700 48g 4xg 2qsfp+ Firmware
Before r2432p61
Running on/withPlatform Versions
Hpe
Flexfabric 5700 48g 4xg 2qsfp+
All versions

Related CWEs

CWE-601
URL Redirection to Untrusted Site ('Open Redirect')
A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks.

References (2)

Source: security-alert@hpe.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.