CVE-2022-37934
Medium
Description
A potential security vulnerability has been identified in HPE OfficeConnect 1820, and 1850 switch series. The vulnerability could be remotely exploited to allow remote directory traversal in HPE OfficeConnect 1820 switch series version PT.02.17 and below, HPE OfficeConnect 1850 switch series version PC.01.23 and below, and HPE OfficeConnect 1850 (10G aggregator) switch version PO.01.22 and below.
SeverityMedium
CVSS6.8
Exploit probability—
ProductHp Officeconnect 1820 24g Poe\+ \(185w\) Switch J9983a Firmware
PublishedJan 5, 2023
First seenJan 5, 2023
Weakness typeCWE-22Path traversal
How to fix
Update
- hp officeconnect_1820_24g_poe\+_\(185w\)_switch_j9983a_firmwarept.02.17 or later
- hp officeconnect_1820_48g_poe\+_\(370w\)_switch_j9984a_firmwarept.02.17 or later
- hp officeconnect_1820_8g_poe\+_\(65w\)_switch_j9982a_firmwarept.02.17 or later
- hp officeconnect_1820_8g_switch_j9979a_firmwarept.02.17 or later
- hpe officeconnect_1850_24g_2xgt_firmwarepc.01.23 or later
- hpe officeconnect_1850_24g_2xgt_poe\+_firmwarepc.01.23 or later
- hpe officeconnect_1850_2xgt\/spf\+_firmwarepo.01.22 or later
- hpe officeconnect_1850_48g_4xgt_firmwarepc.01.23 or later
- hpe officeconnect_1850_48g_4xgt_poe\+_firmwarepc.01.23 or later
- hpe officeconnect_1850_6xgt_firmwarepc.01.23 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hp officeconnect_1820_24g_poe\+_\(185w\)_switch_j9983a_firmware | v < pt.02.17 | pt.02.17 |
| hp officeconnect_1820_48g_poe\+_\(370w\)_switch_j9984a_firmware | v < pt.02.17 | pt.02.17 |
| hp officeconnect_1820_8g_poe\+_\(65w\)_switch_j9982a_firmware | v < pt.02.17 | pt.02.17 |
| hp officeconnect_1820_8g_switch_j9979a_firmware | v < pt.02.17 | pt.02.17 |
| hpe officeconnect_1850_24g_2xgt_firmware | v < pc.01.23 | pc.01.23 |
| hpe officeconnect_1850_24g_2xgt_poe\+_firmware | v < pc.01.23 | pc.01.23 |
| hpe officeconnect_1850_2xgt\/spf\+_firmware | v < po.01.22 | po.01.22 |
| hpe officeconnect_1850_48g_4xgt_firmware | v < pc.01.23 | pc.01.23 |
| hpe officeconnect_1850_48g_4xgt_poe\+_firmware | v < pc.01.23 | pc.01.23 |
| hpe officeconnect_1850_6xgt_firmware | v < pc.01.23 | pc.01.23 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.