CVE-2022-37932
High
Description
A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches. The vulnerability could be remotely exploited to allow authentication bypass. HPE has made the following software updates to resolve the vulnerability in Hewlett Packard Enterprise OfficeConnect 1820, 1850 and 1920S Network switches versions: Prior to PT.02.14; Prior to PC.01.22; Prior to PO.01.21; Prior to PD.02.22;
SeverityHigh
CVSS8.8
Exploit probability—
ProductHpe Officeconnect 1820 J9979a Firmware
PublishedDec 12, 2022
First seenDec 12, 2022
How to fix
Update
- hpe officeconnect_1820_j9979a_firmwarept.02.14 or later
- hpe officeconnect_1820_j9982a_firmwarept.02.14 or later
- hpe officeconnect_1820_j9980a_firmwarept.02.14 or later
- hpe officeconnect_1820_j9983a_firmwarept.02.14 or later
- hpe officeconnect_1820_j9981a_firmwarept.02.14 or later
- hpe officeconnect_1820_j9984a_firmwarept.02.14 or later
- hpe officeconnect_1850_24g_2xgt_poe\+_firmwarepc.01.22 or later
- hpe officeconnect_1850_24g_2xgt_firmwarepc.01.22 or later
- hpe officeconnect_1850_48g_4xgt_poe\+_firmwarepc.01.22 or later
- hpe officeconnect_1850_48g_4xgt_firmwarepc.01.22 or later
- hpe officeconnect_1850_6xgt_firmwarepo.01.21 or later
- hpe officeconnect_1850_2xgt\/spf\+_firmwarepo.01.21 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hpe officeconnect_1820_j9979a_firmware | v < pt.02.14 | pt.02.14 |
| hpe officeconnect_1820_j9982a_firmware | v < pt.02.14 | pt.02.14 |
| hpe officeconnect_1820_j9980a_firmware | v < pt.02.14 | pt.02.14 |
| hpe officeconnect_1820_j9983a_firmware | v < pt.02.14 | pt.02.14 |
| hpe officeconnect_1820_j9981a_firmware | v < pt.02.14 | pt.02.14 |
| hpe officeconnect_1820_j9984a_firmware | v < pt.02.14 | pt.02.14 |
| hpe officeconnect_1850_24g_2xgt_poe\+_firmware | v < pc.01.22 | pc.01.22 |
| hpe officeconnect_1850_24g_2xgt_firmware | v < pc.01.22 | pc.01.22 |
| hpe officeconnect_1850_48g_4xgt_poe\+_firmware | v < pc.01.22 | pc.01.22 |
| hpe officeconnect_1850_48g_4xgt_firmware | v < pc.01.22 | pc.01.22 |
| hpe officeconnect_1850_6xgt_firmware | v < po.01.21 | po.01.21 |
| hpe officeconnect_1850_2xgt\/spf\+_firmware | v < po.01.21 | po.01.21 |
| hpe officeconnect_1920s_24g_2sfp_poe\+_firmware | v < pd.02.22 | pd.02.22 |
| hpe officeconnect_1920s_24g_2sfp_ppoe\+_firmware | v < pd.02.22 | pd.02.22 |
| hpe officeconnect_1920s_24g_2sfp_firmware | v < pd.02.22 | pd.02.22 |
| hpe officeconnect_1920s_48g_4sfp_ppoe\+_firmware | v < pd.02.22 | pd.02.22 |
| hpe officeconnect_1920s_48g_4sfp_firmware | v < pd.02.22 | pd.02.22 |
| hpe officeconnect_1920s_8g_ppoe\+_firmware | v < pd.02.22 | pd.02.22 |
| hpe officeconnect_1920s_8g_firmware | v < pd.02.22 | pd.02.22 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.