Command Injection Vulnerability in HPE Nimble Storage Solutions

CVE-2022-28618

What is CVE-2022-28618?

A command injection vulnerability has been discovered in HPE Nimble Storage Hybrid Flash Arrays, All Flash Arrays, and Secondary Flash Arrays. This security weakness allows attackers to execute arbitrary commands on affected Nimble appliances, potentially compromising system integrity and data security. To address this issue, HPE has released software updates for the affected products, specifically versions 5.0.10.100 or later, 5.2.1.0 or later, and 6.0.0.100 or later. It is crucial for users to implement these updates promptly to ensure their systems remain secure.

References