Lucene search

[email protected]CVE-2022-37932

HistoryDec 12, 2022 - 1:15 p.m.

CVE-2022-37932

2022-12-1213:15:14

[email protected]

web.nvd.nist.gov

cve-2022-37932

vulnerability

hewlett packard enterprise

officeconnect

1820

1850

1920s

network switches

authentication bypass

software updates

nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.8%

JSON

A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches. The vulnerability could be remotely exploited to allow authentication bypass. HPE has made the following software updates to resolve the vulnerability in Hewlett Packard Enterprise OfficeConnect 1820, 1850 and 1920S Network switches versions: Prior to PT.02.14; Prior to PC.01.22; Prior to PO.01.21; Prior to PD.02.22;

Affected configurations

NVD

Node

hpeofficeconnect_1820_j9979a_firmwareRange<pt.02.14

AND

hpeofficeconnect_1820_j9979aMatch-

Node

hpeofficeconnect_1820_j9982a_firmwareRange<pt.02.14

AND

hpeofficeconnect_1820_j9982aMatch-

Node

hpeofficeconnect_1820_j9980a_firmwareRange<pt.02.14

AND

hpeofficeconnect_1820_j9980aMatch-

Node

hpeofficeconnect_1820_j9983a_firmwareRange<pt.02.14

AND

hpeofficeconnect_1820_j9983aMatch-

Node

hpeofficeconnect_1820_j9981a_firmwareRange<pt.02.14

AND

hpeofficeconnect_1820_j9981aMatch-

Node

hpeofficeconnect_1820_j9984a_firmwareRange<pt.02.14

AND

hpeofficeconnect_1820_j9984aMatch-

Node

hpeofficeconnect_1850_24g_2xgt_poe\+_firmwareRange<pc.01.22

AND

hpeofficeconnect_1850_24g_2xgt_poe\+Match-

Node

hpeofficeconnect_1850_24g_2xgt_firmwareRange<pc.01.22

AND

hpeofficeconnect_1850_24g_2xgtMatch-

Node

hpeofficeconnect_1850_48g_4xgt_poe\+_firmwareRange<pc.01.22

AND

hpeofficeconnect_1850_48g_4xgt_poe\+Match-

Node

hpeofficeconnect_1850_48g_4xgt_firmwareRange<pc.01.22

AND

hpeofficeconnect_1850_48g_4xgtMatch-

Node

hpeofficeconnect_1850_6xgt_firmwareRange<po.01.21

AND

hpeofficeconnect_1850_6xgtMatch-

Node

hpeofficeconnect_1850_2xgt\/spf\+_firmwareRange<po.01.21

AND

hpeofficeconnect_1850_2xgt\/spf\+Match-

Node

hpeofficeconnect_1920s_24g_2sfp_poe\+_firmwareRange<pd.02.22

AND

hpeofficeconnect_1920s_24g_2sfp_poe\+Match-

Node

hpeofficeconnect_1920s_24g_2sfp_ppoe\+_firmwareRange<pd.02.22

AND

hpeofficeconnect_1920s_24g_2sfp_ppoe\+Match-

Node

hpeofficeconnect_1920s_24g_2sfp_firmwareRange<pd.02.22

AND

hpeofficeconnect_1920s_24g_2sfpMatch-

Node

hpeofficeconnect_1920s_48g_4sfp_ppoe\+_firmwareRange<pd.02.22

AND

hpeofficeconnect_1920s_48g_4sfp_ppoe\+Match-

Node

hpeofficeconnect_1920s_48g_4sfp_firmwareRange<pd.02.22

AND

hpeofficeconnect_1920s_48g_4sfpMatch-

Node

hpeofficeconnect_1920s_8g_ppoe\+_firmwareRange<pd.02.22

AND

hpeofficeconnect_1920s_8g_ppoe\+Match-

Node

hpeofficeconnect_1920s_8g_firmwareRange<pd.02.22

AND

hpeofficeconnect_1920s_8gMatch-

CPENameOperatorVersion
hpe:officeconnect_1820_j9979a_firmwarehpe officeconnect 1820 j9979a firmwareltpt.02.14

CPE	Name	Operator	Version
hpe:officeconnect_1820_j9979a_firmware	hpe officeconnect 1820 j9979a firmware	lt	pt.02.14

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches",
    "vendor": "Hewlett Packard Enterprise (HPE)",
    "versions": [
      {
        "status": "affected",
        "version": "Prior to PT.02.14; Prior to PC.01.22; Prior to PO.01.21; Prior to PD.02.22;"
      }
    ]
  }
]

References

support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04383en_us

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.8%

JSON

Related for CVE-2022-37932

nvd1 cvelist1 zdi1 prion1