9.8

CVE-2022-37932

A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches. The vulnerability could be remotely exploited to allow authentication bypass. HPE has made the following software updates to resolve the vulnerability in Hewlett Packard Enterprise OfficeConnect 1820, 1850 and 1920S Network switches versions: Prior to PT.02.14; Prior to PC.01.22; Prior to PO.01.21; Prior to PD.02.22;

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
HpeOfficeconnect 1820 J9979a Firmware Version < pt.02.14
   HpeOfficeconnect 1820 J9979a Version-
HpeOfficeconnect 1820 J9982a Firmware Version < pt.02.14
   HpeOfficeconnect 1820 J9982a Version-
HpeOfficeconnect 1820 J9980a Firmware Version < pt.02.14
   HpeOfficeconnect 1820 J9980a Version-
HpeOfficeconnect 1820 J9983a Firmware Version < pt.02.14
   HpeOfficeconnect 1820 J9983a Version-
HpeOfficeconnect 1820 J9981a Firmware Version < pt.02.14
   HpeOfficeconnect 1820 J9981a Version-
HpeOfficeconnect 1820 J9984a Firmware Version < pt.02.14
   HpeOfficeconnect 1820 J9984a Version-
HpeOfficeconnect 1850 24g 2xgt Firmware Version < pc.01.22
   HpeOfficeconnect 1850 24g 2xgt Version-
HpeOfficeconnect 1850 48g 4xgt Firmware Version < pc.01.22
   HpeOfficeconnect 1850 48g 4xgt Version-
HpeOfficeconnect 1850 6xgt Firmware Version < po.01.21
   HpeOfficeconnect 1850 6xgt Version-
HpeOfficeconnect 1920s 8g Firmware Version < pd.02.22
   HpeOfficeconnect 1920s 8g Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 72.12% 0.987
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
security-alert@hpe.com 8.8 2.8 5.9
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H