{"id":"CVE-2022-28622","aliases":["EUVD-2022-33064","GHSA-6hj7-83x8-pjqq"],"status":"published","title":"A potential security vulnerability has been identified in HPE StoreOnce Software. The SSH server...","description":"A potential security vulnerability has been identified in HPE StoreOnce Software. The SSH server supports weak key exchange algorithms which could lead to remote unauthorized access. HPE has made the following software update to resolve the vulnerability in HPE StoreOnce Software 4.3.2.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00815,"percentile":0.57336,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-327"],"published":"2022-06-27T18:51:25Z","modified":"2026-06-17T04:38:43Z","products":[{"vendor":"hewlett packard enterprise (hpe)","product":"hpe storeonce software"},{"vendor":"hpe","product":"storeonce_3640_firmware"}],"references":[{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst04311en_us","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-28622"},{"url":"https://github.com/advisories/GHSA-6hj7-83x8-pjqq"}],"sources":{"cve":[{"id":"CVE-2022-28622","description":"A potential security vulnerability has been identified in HPE StoreOnce Software. The SSH server supports weak key exchange algorithms which could lead to remote unauthorized access. HPE has made the following software update to resolve the vulnerability in HPE StoreOnce Software 4.3.2.","status":"published","published":"2022-06-27T18:51:25Z","modified":"2024-08-03T05:56:16.162Z","updated_at":"2026-11-02T14:34:39.233406Z"}],"euvd":[{"id":"EUVD-2022-33064","description":"A potential security vulnerability has been identified in HPE StoreOnce Software. The SSH server supports weak key exchange algorithms which could lead to remote unauthorized access. HPE has made the following software update to resolve the vulnerability in HPE StoreOnce Software 4.3.2.","status":"published","published":"2022-06-27T18:51:25Z","modified":"2024-08-03T05:56:16Z","updated_at":"2026-11-03T03:25:40.388857Z"}],"ghsa":[{"id":"GHSA-6hj7-83x8-pjqq","title":"A potential security vulnerability has been identified in HPE StoreOnce Software. The SSH server...","description":"A potential security vulnerability has been identified in HPE StoreOnce Software. The SSH server supports weak key exchange algorithms which could lead to remote unauthorized access. HPE has made the following software update to resolve the vulnerability in HPE StoreOnce Software 4.3.2.","status":"published","published":"2022-06-28T00:00:43Z","modified":"2023-01-27T05:05:22Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-327"],"updated_at":"2026-11-02T14:42:40.834674Z"}],"nvd":[{"id":"CVE-2022-28622","description":"A potential security vulnerability has been identified in HPE StoreOnce Software. The SSH server supports weak key exchange algorithms which could lead to remote unauthorized access. HPE has made the following software update to resolve the vulnerability in HPE StoreOnce Software 4.3.2.","status":"published","published":"2022-06-27T19:15:08.187Z","modified":"2026-06-17T04:38:43.577Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-327"],"updated_at":"2026-11-02T14:07:22.613788Z"}]}}