CVE-2024-22437

HighCVSS 7.3/10Last modified Jun 17, 2026

Description

A potential security vulnerability has been identified in VSS Provider and CAPI Proxy software for certain HPE MSA storage products. This vulnerability could be exploited to gain elevated privilege on the system.

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-428

Affected software

Vendor	Product	Versions
Hewlett Packard Enterprise	HPE MSA SAN Storage VSS Provider and CAPI Proxy Software	>= N/A, < 4.1.3.83

References

Timeline

Published: Apr 15, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-224383.5A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820 Network switches. The vulnerability CVE-2024-224396.9A potential security vulnerability has been identified in HPE FlexFabric and FlexNetwork series products. This vulnerability could be exploi CVE-2024-22445.3REST service authentication anomaly with “valid username/no password” credential combination for batch job processing resulting in successfu CVE-2024-224406.8A potential security vulnerability has been identified in HPE Compute Scale-up Server 3200 server. This vulnerability could cause disclosure CVE-2024-224419.8HPE Cray Parallel Application Launch Service (PALS) is subject to an authentication bypass.CVE-2024-224429.8The vulnerability could be remotely exploited to bypass authentication.CVE-2024-224438.8A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to con CVE-2024-224446.1A vulnerability within the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow a remote attacker to conduct a refl CVE-2024-224457.2Dell PowerProtect Data Manager, version 19.15 and prior versions, contain an OS command injection vulnerability. A remote high privileged at CVE-2024-224477.8Dell Peripheral Manager, versions prior to 1.7.3, contain an uncontrolled search path element vulnerability. An attacker could potentially e CVE-2024-224484.4Dell BIOS contains an Out-of-Bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploi CVE-2024-224497.8Dell PowerScale OneFS versions 9.0.0.x through 9.6.0.x contains a missing authentication for critical function vulnerability. A low privileg