Critical severity · published Dec 12, 2022
CVE-2022-37932
A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches
9.8
CVSS
2.8%
EPSS
No
On KEV
Description
A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches. The vulnerability could be remotely exploited to allow authentication bypass. HPE has made the following software updates to resolve the vulnerability in Hewlett Packard Enterprise OfficeConnect 1820, 1850 and 1920S Network switches versions: Prior to PT.02.14; Prior to PC.01.22; Prior to PO.01.21; Prior to PD.02.22;
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.8% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
O1
Officeconnect 1820 J9979a Firmware · Hpe
before pt.02.14 · source: NVD
O1
Officeconnect 1820 J9980a Firmware · Hpe
before pt.02.14 · source: NVD
O1
Officeconnect 1820 J9981a Firmware · Hpe
before pt.02.14 · source: NVD
O1
Officeconnect 1820 J9982a Firmware · Hpe
before pt.02.14 · source: NVD
O1
Officeconnect 1820 J9983a Firmware · Hpe
before pt.02.14 · source: NVD
O1
Officeconnect 1820 J9984a Firmware · Hpe
before pt.02.14 · source: NVD
O1
Officeconnect 1850 24g 2xgt Firmware · Hpe
before pc.01.22 · source: NVD
O1
O1
Officeconnect 1850 2xgt/spf+ Firmware · Hpe
before po.01.21 · source: NVD
O1
Officeconnect 1850 48g 4xgt Firmware · Hpe
before pc.01.22 · source: NVD
O1
O1
Officeconnect 1850 6xgt Firmware · Hpe
before po.01.21 · source: NVD