CVE-2024-22439 MEDIUM

CVE-2024-22439: Certain HPE FlexNetwork and FlexFabric Switches, Remote Authentication Bypass

Vendor Hewlett Packard Enterprise
Product HPE FlexNetwork and FlexFabric products
Weakness CWE-639 · IDOR
Published April 15, 2024
Last update August 1, 2024
View on NVD All CVEs

CVSS base score

6.9/10
Attack vector Adjacent
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality High
Integrity Low

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N

What the vulnerability does

01Description

A potential security vulnerability has been identified in HPE FlexFabric and FlexNetwork series products. This vulnerability could be exploited to gain privileged access to switches resulting in information disclosure.

Key dates

02Disclosure timeline

April 15, 2024 CVE published
August 1, 2024 Record updated