What is CVE-2022-28622?

CVE-2022-28622 is a high-severity vulnerability in Hpe Storeonce 3640, classified under Use of a Broken or Risky Cryptographic Algorithm. CVSS score: 7.5/10. Published 2022-06-27.

How severe is CVE-2022-28622?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Hpe Storeonce 3640

CVE-2022-28622

A potential security vulnerability has been identified in HPE StoreOnce Software. The SSH server supports weak key exchange algorithms which could lead to remote unauthorized access. HPE has made the following software update to resolve the vulnerability in HPE StoreOnce Software 4.3.2.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.008 (51.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Hpe Storeonce_3640
Hpe Storeonce_3640_firmware
N/a Hpe Storeonce Software — versions Prior to 4.3.2

Weakness classification (CWE)

CWE-327 — Use of a Broken or Risky Cryptographic Algorithm

References

security-alert@hpe.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2022-28622?: CVE-2022-28622 is a high-severity vulnerability in Hpe Storeonce 3640, classified under Use of a Broken or Risky Cryptographic Algorithm. CVSS score: 7.5/10. Published 2022-06-27.
How severe is CVE-2022-28622?: High severity. CVSS v3 base score is 7.5 out of 10.