CVE-2022-37934

A potential security vulnerability has been identified in HPE OfficeConnect 1820, and 1850 switch series. The vulnerability could be remotely exploited to allow remote directory traversal in HPE OfficeConnect 1820 switch series version PT.02.17 and below, HPE OfficeConnect 1850 switch series version PC.01.23 and below, and HPE OfficeConnect 1850 (10G aggregator) switch version PO.01.22 and below.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:hp:officeconnect_1820_24g_poe\+_\(185w\)_switch_j9983a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:officeconnect_1820_24g_poe\+_\(185w\)_switch_j9983a:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:hp:officeconnect_1820_48g_poe\+_\(370w\)_switch_j9984a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:officeconnect_1820_48g_poe\+_\(370w\)_switch_j9984a:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:hp:officeconnect_1820_8g_poe\+_\(65w\)_switch_j9982a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:officeconnect_1820_8g_poe\+_\(65w\)_switch_j9982a:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:hp:officeconnect_1820_8g_switch_j9979a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:officeconnect_1820_8g_switch_j9979a:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:hpe:officeconnect_1850_24g_2xgt_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1850_24g_2xgt:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:hpe:officeconnect_1850_24g_2xgt_poe\+_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1850_24g_2xgt_poe\+:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:hpe:officeconnect_1850_2xgt\/spf\+_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1850_2xgt\/spf\+:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:hpe:officeconnect_1850_48g_4xgt_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1850_48g_4xgt:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:hpe:officeconnect_1850_48g_4xgt_poe\+_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1850_48g_4xgt_poe\+:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:hpe:officeconnect_1850_6xgt_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:hpe:officeconnect_1850_6xgt:-:*:*:*:*:*:*:*

Information

Published : 2023-01-04 23:15

Updated : 2023-01-12 05:47


NVD link : CVE-2022-37934

Mitre link : CVE-2022-37934


JSON object : View

CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Advertisement

dedicated server usa

Products Affected

hpe

  • officeconnect_1850_24g_2xgt_poe\+_firmware
  • officeconnect_1850_48g_4xgt_poe\+
  • officeconnect_1850_6xgt
  • officeconnect_1850_24g_2xgt_firmware
  • officeconnect_1850_24g_2xgt
  • officeconnect_1850_24g_2xgt_poe\+
  • officeconnect_1850_48g_4xgt_poe\+_firmware
  • officeconnect_1850_48g_4xgt_firmware
  • officeconnect_1850_2xgt\/spf\+_firmware
  • officeconnect_1850_2xgt\/spf\+
  • officeconnect_1850_6xgt_firmware
  • officeconnect_1850_48g_4xgt

hp

  • officeconnect_1820_24g_poe\+_\(185w\)_switch_j9983a_firmware
  • officeconnect_1820_8g_poe\+_\(65w\)_switch_j9982a
  • officeconnect_1820_8g_poe\+_\(65w\)_switch_j9982a_firmware
  • officeconnect_1820_8g_switch_j9979a_firmware
  • officeconnect_1820_48g_poe\+_\(370w\)_switch_j9984a_firmware
  • officeconnect_1820_8g_switch_j9979a
  • officeconnect_1820_48g_poe\+_\(370w\)_switch_j9984a
  • officeconnect_1820_24g_poe\+_\(185w\)_switch_j9983a