PT-2023-13559 · Hewlett Packard · Hpe Officeconnect 1820+1

Published 2023-01-03 · Updated 2023-01-12 · CVE-2022-37934

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions HPE OfficeConnect 1820 switch series version PT.02.17 and below HPE OfficeConnect 1850 switch series version PC.01.23 and below HPE OfficeConnect 1850 (10G aggregator) switch version PO.01.22 and below

Description A potential security issue has been identified that could allow remote directory traversal.

Recommendations For HPE OfficeConnect 1820 switch series version PT.02.17 and below, update to a version above PT.02.17. For HPE OfficeConnect 1850 switch series version PC.01.23 and below, update to a version above PC.01.23. For HPE OfficeConnect 1850 (10G aggregator) switch version PO.01.22 and below, update to a version above PO.01.22.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2022-37934

Affected Products

Hpe Officeconnect 1820

Hpe Officeconnect 1850

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2022-37934 · Security Note
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04401en_us · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-37934 · Vendor Advisory