{"id":"CVE-2024-22437","aliases":["EUVD-2024-19981","GHSA-24vx-27hc-7h4h"],"status":"published","title":"HPE MSA SAN Storage VSS Provider and CAPI Proxy Software, Elevation of Privilege","description":"A potential security vulnerability has been identified in VSS Provider and CAPI Proxy software for certain HPE MSA storage products. This vulnerability could be exploited to gain elevated privilege on the system.","severity":{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00181,"percentile":0.07771,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-428"],"published":"2024-04-15T09:21:40Z","modified":"2026-06-17T07:11:24Z","products":[{"vendor":"hewlett packard enterprise","product":"hpe msa san storage vss provider and capi proxy software"}],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US\u0026docId=hpesbst04630en_us","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-22437"},{"url":"https://github.com/advisories/GHSA-24vx-27hc-7h4h"}],"sources":{"cve":[{"id":"CVE-2024-22437","title":"HPE MSA SAN Storage VSS Provider and CAPI Proxy Software, Elevation of Privilege","description":"\nA potential security vulnerability has been identified in VSS Provider and CAPI Proxy software for certain HPE MSA storage products. This vulnerability could be exploited to gain elevated privilege on the system.\n\n","status":"published","published":"2024-04-15T09:21:40.627Z","modified":"2024-08-01T22:43:34.946Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-428"],"updated_at":"2026-11-02T14:33:59.884489Z"}],"euvd":[{"id":"EUVD-2024-19981","description":"\nA potential security vulnerability has been identified in VSS Provider and CAPI Proxy software for certain HPE MSA storage products. This vulnerability could be exploited to gain elevated privilege on the system.\n\n","status":"published","published":"2024-04-15T09:21:40Z","modified":"2024-08-01T22:43:34Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T03:50:29.401303Z"}],"ghsa":[{"id":"GHSA-24vx-27hc-7h4h","title":"\nA potential security vulnerability has been identified in VSS Provider and CAPI Proxy software...","description":"\nA potential security vulnerability has been identified in VSS Provider and CAPI Proxy software for certain HPE MSA storage products. This vulnerability could be exploited to gain elevated privilege on the system.\n\n","status":"published","published":"2024-04-15T12:30:33Z","modified":"2024-04-15T12:30:38Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-428"],"updated_at":"2026-11-02T14:57:12.357893Z"}],"nvd":[{"id":"CVE-2024-22437","description":"\nA potential security vulnerability has been identified in VSS Provider and CAPI Proxy software for certain HPE MSA storage products. This vulnerability could be exploited to gain elevated privilege on the system.\n\n","status":"published","published":"2024-04-15T10:15:07.797Z","modified":"2026-06-17T07:11:24.513Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-428"],"updated_at":"2026-11-02T14:09:50.299382Z"}]}}