CVE-2022-37932

A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches. The vulnerability could be remotely exploited to allow authentication bypass. HPE has made the following software updates to resolve the vulnerability in...

CVE-2022-37932

HP OfficeConnect switches (1820, 1850, 1920S) are affected by CVE-2022-37932, with an authentication bypass vulnerability in the login flow. The issue exists in the web/HTTP login handling where the default password can be changed without prior authentication, enabling an unauthenticated attacker...