Vulnerability · Published Nov 30, 2022 · Assigned by hpe
CVE-2022-37932
High 8.8
In plain English
A high-severity security flaw in Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches from Hewlett Packard Enterprise (HPE). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.9% (higher than 87% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei, public proof-of-concept code.
Official description
A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches. The vulnerability could be remotely exploited to allow authentication bypass. HPE has made the following software updates to resolve the vulnerability in Hewlett Packard Enterprise OfficeConnect 1820, 1850 and 1920S Network switches versions: Prior to PT.02.14; Prior to PC.01.22; Prior to PO.01.21; Prior to PD.02.22;
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Hewlett Packard Enterprise (HPE) | Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches | Prior to PT.02.14; Prior to PC.01.22; Prior to PO.01.21; Prior to PD.02.22; |