CVE-2022-37934 MEDIUM

CVE-2022-37934

Vendor Hewlett Packard Enterprise (Hpe)
Product HPE OfficeConnect 1820 and 1850 Switch Series
Published January 3, 2023
Last update April 10, 2025
View on NVD All CVEs

CVSS base score

6.8/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

What the vulnerability does

01Description

A potential security vulnerability has been identified in HPE OfficeConnect 1820, and 1850 switch series. The vulnerability could be remotely exploited to allow remote directory traversal in HPE OfficeConnect 1820 switch series version PT.02.17 and below, HPE OfficeConnect 1850 switch series version PC.01.23 and below, and HPE OfficeConnect 1850 (10G aggregator) switch version PO.01.22 and below.

Key dates

02Disclosure timeline

January 3, 2023 CVE published
April 10, 2025 Record updated