CVE-2022-28622: HPE Storeonce 3640 Firmware

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

A potential security vulnerability has been identified in HPE StoreOnce Software. The SSH server supports weak key exchange algorithms which could lead to remote unauthorized access. HPE has made the following software update to resolve the vulnerability in HPE StoreOnce Software 4.3.2.

Affected products

• HPE Storeonce 3640 Firmware: before 4.3.2 (fixed in 4.3.2)

Published 2022-06-27. Last modified 2026-06-17.