CVE-2022-37932

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches. The vulnerability could be remotely exploited to allow authentication bypass. HPE has made the following software updates to resolve the vulnerability in Hewlett Packard Enterprise OfficeConnect 1820, 1850 and 1920S Network switches versions: Prior to PT.02.14; Prior to PC.01.22; Prior to PO.01.21; Prior to PD.02.22;

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Dec 12, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-379337.8A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 servers. The vulnerability could be explCVE-2022-379347.5A potential security vulnerability has been identified in HPE OfficeConnect 1820, and 1850 switch series. The vulnerability could be remotelCVE-2022-379355.5HPE OneView for VMware vCenter, in certain circumstances, may disclose the “HPE OneView” Username and Password.CVE-2022-379369.8Unauthenticated Java deserialization vulnerability in Serviceguard ManagerCVE-2022-379379.8Pre-auth memory corruption in HPE ServiceguardCVE-2022-379389.8Unauthenticated server side request forgery in HPE Serviceguard ManagerCVE-2022-379395.5A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 servers. The vulnerability could be locaCVE-2022-37944.3The Jeg Elementor Kit plugin for WordPress is vulnerable to authorization bypass in various AJAX actions in versions up to, and including, 2CVE-2022-379406.1Potential security vulnerabilities have been identified in the HPE FlexFabric 5700 Switch Series. These vulnerabilities could be remotely exCVE-2022-379526.1A reflected cross-site scripting (XSS) vulnerability exists in the iHistorian Data Display of WorkstationST (<v07.09.15) could allow an attaCVE-2022-379536.1An HTTP response splitting vulnerability exists in the AM Gateway Challenge-Response dialog of WorkstationST (<v07.09.15) and could allow anCVE-2022-379547.8DirectX Graphics Kernel Elevation of Privilege Vulnerability
CVE-2022-37932: Critical severity, CVSS 9.8 | Vulnix