CVE-2022-37932 Auth bypass in Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches
Remote attackers can bypass authentication on HPE OfficeConnect network switches, requiring firmware upgrades to mitigate.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-37932?
CVE-2022-37932 is a high-severity authentication bypass vulnerability in Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches, published on 30 Nov 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches. The vulnerability could be remotely exploited to allow authentication bypass. HPE has made the following software updates to resolve the vulnerability in Hewlett Packard Enterprise OfficeConnect 1820, 1850 and 1920S Network switches versions: Prior to PT.02.14; Prior to PC.01.22; Prior to PO.01.21; Prior to PD.02.22;
Which versions are affected by CVE-2022-37932?
It affects 19 products.
Products include Hpe Officeconnect 1820 J9979a Firmware, Hpe Officeconnect 1820 J9980a Firmware, Hpe Officeconnect 1820 J9981a Firmware, Hpe Officeconnect 1820 J9982a Firmware, Hpe Officeconnect 1820 J9983a Firmware, Hpe Officeconnect 1820 J9984a Firmware and 13 more.
How do I fix CVE-2022-37932?
No fix has been published for CVE-2022-37932 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2022-37932 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2022-37932 exists.
Public exploit code: 1 Nuclei template and 1 proofs of concept on GitHub.
Sources
Also known as GHSA-gp8j-jhwq-pp4q.