CVE:CVE-2022-28620
CNNVD:CNNVD-202206-2475
HPE Cray Legacy Shasta是美国慧与科技（HPE）公司的一款超级计算机。可处理当前全新大规模融合式建模。
HPE Cray Legacy Shasta 存在安全漏洞，攻击者可以该漏洞可以远程利用以允许绕过身份验证，以下产品和版本受到影响：HPE Cray EX Supercomputers/Shasta  System ，HPE Slingshot Switches， HPE Cray EX liquid cooled cabinets 1.6.27/1.5.33/1.4.27 之前版本。
solution:Upgrade hpe slingshot_firmware to a higher version than 1.7.2,and avoid the version (,1.7.2); Upgrade hpe cray_ex_supercomputers_firmware to a higher version than 1.4.27,1.5.33,1.6.27,and avoid the version 1.4.27,1.5.33,1.6.27; Upgrade hpe cray_sh_supercomputer_air_cooled_base_system_code_firmware to a higher version than 1.4.27,1.5.33,1.6.27,and avoid the version 1.4.27,1.5.33,1.6.27; Upgrade hpe cray_sh_supercomputer_liquid_cooled_base_system_code_firmware to a higher version than 1.4.27,1.5.33,1.6.27,and avoid the version 1.4.27,1.5.33,1.6.27; Upgrade hpe cray_sh_supercomputer_liquid_cooled_tds_base_system_code_firmware to a higher version than 1.4.27,1.5.33,1.6.27,and avoid the version 1.4.27,1.5.33,1.6.27