CVE-2022-37932

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-37932
A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches. The vulnerability could be remotely exploited to allow authentication bypass. HPE has made the following software updates to resolve the vulnerability in Hewlett Packard Enterprise OfficeConnect 1820, 1850 and 1920S Network switches versions: Prior to PT.02.14; Prior to PC.01.22; Prior to PO.01.21; Prior to PD.02.22;

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04383en_us Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:hpe:officeconnect_1820_j9979a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1820_j9979a:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:hpe:officeconnect_1820_j9982a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1820_j9982a:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:hpe:officeconnect_1820_j9980a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1820_j9980a:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:hpe:officeconnect_1820_j9983a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1820_j9983a:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:hpe:officeconnect_1820_j9981a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1820_j9981a:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:hpe:officeconnect_1820_j9984a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1820_j9984a:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:hpe:officeconnect_1850_24g_2xgt_poe\+_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1850_24g_2xgt_poe\+:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:hpe:officeconnect_1850_24g_2xgt_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1850_24g_2xgt:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:hpe:officeconnect_1850_48g_4xgt_poe\+_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1850_48g_4xgt_poe\+:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:hpe:officeconnect_1850_48g_4xgt_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1850_48g_4xgt:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:hpe:officeconnect_1850_6xgt_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1850_6xgt:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:hpe:officeconnect_1850_2xgt\/spf\+_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1850_2xgt\/spf\+:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:hpe:officeconnect_1920s_24g_2sfp_poe\+_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1920s_24g_2sfp_poe\+:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:hpe:officeconnect_1920s_24g_2sfp_ppoe\+_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1920s_24g_2sfp_ppoe\+:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:hpe:officeconnect_1920s_24g_2sfp_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1920s_24g_2sfp:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:hpe:officeconnect_1920s_48g_4sfp_ppoe\+_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1920s_48g_4sfp_ppoe\+:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:hpe:officeconnect_1920s_48g_4sfp_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1920s_48g_4sfp:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:hpe:officeconnect_1920s_8g_ppoe\+_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1920s_8g_ppoe\+:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:hpe:officeconnect_1920s_8g_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1920s_8g:-:*:*:*:*:*:*:*
History

07 Nov 2023, 03:49

Type Values Removed Values Added
Summary A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches. The vulnerability could be remotely exploited to allow authentication bypass. HPE has made the following software updates to resolve the vulnerability in Hewlett Packard Enterprise OfficeConnect 1820, 1850 and 1920S Network switches versions: Prior to PT.02.14; Prior to PC.01.22; Prior to PO.01.21; Prior to PD.02.22; A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches. The vulnerability could be remotely exploited to allow authentication bypass. HPE has made the following software updates to resolve the vulnerability in Hewlett Packard Enterprise OfficeConnect 1820, 1850 and 1920S Network switches versions: Prior to PT.02.14; Prior to PC.01.22; Prior to PO.01.21; Prior to PD.02.22;

08 Aug 2023, 14:22

Type Values Removed Values Added
CWE CWE-287 NVD-CWE-noinfo

15 Dec 2022, 16:01

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.8
CWE CWE-287
CPE cpe:2.3:h:hpe:officeconnect_1820_j9983a:-:*:*:*:*:*:*:*
cpe:2.3:o:hpe:officeconnect_1920s_24g_2sfp_ppoe\+_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hpe:officeconnect_1850_48g_4xgt_poe\+_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hpe:officeconnect_1920s_24g_2sfp_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hpe:officeconnect_1820_j9981a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hpe:officeconnect_1820_j9980a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1850_48g_4xgt_poe\+:-:*:*:*:*:*:*:*
cpe:2.3:o:hpe:officeconnect_1920s_48g_4sfp_ppoe\+_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hpe:officeconnect_1920s_48g_4sfp_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1850_6xgt:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1920s_8g:-:*:*:*:*:*:*:*
cpe:2.3:o:hpe:officeconnect_1920s_8g_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hpe:officeconnect_1850_24g_2xgt_poe\+_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hpe:officeconnect_1850_2xgt\/spf\+_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1920s_24g_2sfp:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1850_2xgt\/spf\+:-:*:*:*:*:*:*:*
cpe:2.3:o:hpe:officeconnect_1820_j9982a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hpe:officeconnect_1820_j9983a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hpe:officeconnect_1850_6xgt_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hpe:officeconnect_1820_j9984a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1820_j9980a:-:*:*:*:*:*:*:*
cpe:2.3:o:hpe:officeconnect_1850_24g_2xgt_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1820_j9982a:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1920s_48g_4sfp:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1850_24g_2xgt_poe\+:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1820_j9979a:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1820_j9984a:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1920s_8g_ppoe\+:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1920s_24g_2sfp_poe\+:-:*:*:*:*:*:*:*
cpe:2.3:o:hpe:officeconnect_1850_48g_4xgt_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1850_48g_4xgt:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1850_24g_2xgt:-:*:*:*:*:*:*:*
cpe:2.3:o:hpe:officeconnect_1920s_8g_ppoe\+_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hpe:officeconnect_1820_j9979a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hpe:officeconnect_1920s_24g_2sfp_poe\+_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1920s_48g_4sfp_ppoe\+:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1920s_24g_2sfp_ppoe\+:-:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1820_j9981a:-:*:*:*:*:*:*:*
First Time Hpe officeconnect 1920s 24g 2sfp
Hpe officeconnect 1920s 48g 4sfp Firmware
Hpe officeconnect 1920s 8g
Hpe officeconnect 1820 J9983a
Hpe officeconnect 1920s 24g 2sfp Poe\+ Firmware
Hpe officeconnect 1820 J9979a Firmware
Hpe officeconnect 1920s 24g 2sfp Firmware
Hpe officeconnect 1820 J9982a
Hpe officeconnect 1920s 48g 4sfp Ppoe\+ Firmware
Hpe officeconnect 1850 48g 4xgt Firmware
Hpe officeconnect 1820 J9983a Firmware
Hpe officeconnect 1820 J9980a Firmware
Hpe officeconnect 1920s 8g Ppoe\+ Firmware
Hpe officeconnect 1850 48g 4xgt
Hpe officeconnect 1920s 24g 2sfp Poe\+
Hpe officeconnect 1920s 24g 2sfp Ppoe\+ Firmware
Hpe officeconnect 1820 J9984a
Hpe officeconnect 1850 2xgt\/spf\+ Firmware
Hpe officeconnect 1850 24g 2xgt Poe\+ Firmware
Hpe officeconnect 1850 24g 2xgt Firmware
Hpe officeconnect 1850 6xgt
Hpe officeconnect 1920s 8g Ppoe\+
Hpe officeconnect 1850 48g 4xgt Poe\+
Hpe officeconnect 1850 24g 2xgt
Hpe officeconnect 1920s 48g 4sfp
Hpe
Hpe officeconnect 1820 J9984a Firmware
Hpe officeconnect 1820 J9979a
Hpe officeconnect 1920s 8g Firmware
Hpe officeconnect 1850 2xgt\/spf\+
Hpe officeconnect 1920s 24g 2sfp Ppoe\+
Hpe officeconnect 1850 6xgt Firmware
Hpe officeconnect 1820 J9982a Firmware
Hpe officeconnect 1850 48g 4xgt Poe\+ Firmware
Hpe officeconnect 1820 J9980a
Hpe officeconnect 1820 J9981a Firmware
Hpe officeconnect 1850 24g 2xgt Poe\+
Hpe officeconnect 1920s 48g 4sfp Ppoe\+
Hpe officeconnect 1820 J9981a
References (MISC) https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04383en_us - (MISC) https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04383en_us - Vendor Advisory

12 Dec 2022, 13:17

Type Values Removed Values Added
New CVE
Information

Published : 2022-12-12 13:15

Updated : 2023-12-10 14:48

NVD link : CVE-2022-37932

Mitre link : CVE-2022-37932

CVE.ORG link : CVE-2022-37932

JSON object : View

Products Affected

hpe

  • officeconnect_1850_2xgt\/spf\+_firmware
  • officeconnect_1820_j9982a
  • officeconnect_1820_j9980a_firmware
  • officeconnect_1920s_24g_2sfp
  • officeconnect_1920s_8g_ppoe\+
  • officeconnect_1920s_24g_2sfp_poe\+
  • officeconnect_1820_j9980a
  • officeconnect_1850_2xgt\/spf\+
  • officeconnect_1820_j9981a_firmware
  • officeconnect_1820_j9984a
  • officeconnect_1820_j9979a
  • officeconnect_1850_48g_4xgt_poe\+
  • officeconnect_1820_j9979a_firmware
  • officeconnect_1850_24g_2xgt_firmware
  • officeconnect_1920s_24g_2sfp_poe\+_firmware
  • officeconnect_1920s_8g
  • officeconnect_1820_j9982a_firmware
  • officeconnect_1850_6xgt
  • officeconnect_1850_24g_2xgt_poe\+_firmware
  • officeconnect_1920s_24g_2sfp_ppoe\+_firmware
  • officeconnect_1850_6xgt_firmware
  • officeconnect_1850_48g_4xgt_poe\+_firmware
  • officeconnect_1820_j9983a
  • officeconnect_1820_j9983a_firmware
  • officeconnect_1820_j9981a
  • officeconnect_1920s_48g_4sfp
  • officeconnect_1850_24g_2xgt
  • officeconnect_1920s_48g_4sfp_ppoe\+_firmware
  • officeconnect_1920s_24g_2sfp_firmware
  • officeconnect_1850_48g_4xgt
  • officeconnect_1920s_8g_firmware
  • officeconnect_1850_24g_2xgt_poe\+
  • officeconnect_1920s_24g_2sfp_ppoe\+
  • officeconnect_1920s_48g_4sfp_ppoe\+
  • officeconnect_1920s_8g_ppoe\+_firmware
  • officeconnect_1820_j9984a_firmware
  • officeconnect_1920s_48g_4sfp_firmware
  • officeconnect_1850_48g_4xgt_firmware
CWE
NVD-CWE-noinfo