Read the docs
TI-2017-03724 Aliases CVE-2017-5786GHSA-j3w9-4qwp-6gq3

A local Unauthorized Data Modification vulnerability in HPE OfficeConnect Network…

Priority LOW 26Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · High · None
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

A local Unauthorized Data Modification vulnerability in HPE OfficeConnect Network Switches version PT.02.01 including PT.01.03 through PT.01.14

Why it matters now

EPSS 0.00576 47th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
Hewlett Packard EnterpriseOfficeConnect Network SwitchesPT.02.01 including: PT.01.03 through PT.01.14—No fix listedCNA
  • OfficeConnect Network Switches VendorHewlett Packard Enterprise Affected PT.02.01 including: PT.01.03 through PT.01.14 Fixed in — No fix listed CNA

CPE configurations NVD · 18

CPEVersionsRoleVendor
cpe:2.3:o:hp:officeconnect_1820_8g_switch_j9979a_firmware:*:*:*:*:*:*:*:*after pt.01.03, up to pt.01.14VulnerableHewlett Packard Enterprise
cpe:2.3:o:hp:officeconnect_1820_8g_switch_j9979a_firmware:pt.02.01:*:*:*:*:*:*:*pt.02.01VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:officeconnect_1820_8g_switch_j9979a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:officeconnect_1820_24g_poe\+_\(185w\)_switch_j9983a_firmware:*:*:*:*:*:*:*:*pt.01.03 – pt.01.14VulnerableHewlett Packard Enterprise
cpe:2.3:o:hp:officeconnect_1820_24g_poe\+_\(185w\)_switch_j9983a_firmware:pt.02.01:*:*:*:*:*:*:*pt.02.01VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:officeconnect_1820_24g_poe\+_\(185w\)_switch_j9983a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:officeconnect_1820_24g_switch_j9980a_firmware:*:*:*:*:*:*:*:*pt.01.03 – pt.01.14VulnerableHewlett Packard Enterprise
cpe:2.3:o:hp:officeconnect_1820_24g_switch_j9980a_firmware:pt.02.01:*:*:*:*:*:*:*pt.02.01VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:officeconnect_1820_24g_switch_j9980a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:officeconnect_1820_48g_poe\+_\(370w\)_switch_j9984a_firmware:*:*:*:*:*:*:*:*pt.01.03 – pt.01.14VulnerableHewlett Packard Enterprise
  • cpe:2.3:o:hp:officeconnect_1820_8g_switch_j9979a_firmware:*:*:*:*:*:*:*:* Versions after pt.01.03, up to pt.01.14 Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:o:hp:officeconnect_1820_8g_switch_j9979a_firmware:pt.02.01:*:*:*:*:*:*:* Versions pt.02.01 Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:h:hp:officeconnect_1820_8g_switch_j9979a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
  • cpe:2.3:o:hp:officeconnect_1820_24g_poe\+_\(185w\)_switch_j9983a_firmware:*:*:*:*:*:*:*:* Versions pt.01.03 – pt.01.14 Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:o:hp:officeconnect_1820_24g_poe\+_\(185w\)_switch_j9983a_firmware:pt.02.01:*:*:*:*:*:*:* Versions pt.02.01 Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:h:hp:officeconnect_1820_24g_poe\+_\(185w\)_switch_j9983a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
  • cpe:2.3:o:hp:officeconnect_1820_24g_switch_j9980a_firmware:*:*:*:*:*:*:*:* Versions pt.01.03 – pt.01.14 Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:o:hp:officeconnect_1820_24g_switch_j9980a_firmware:pt.02.01:*:*:*:*:*:*:* Versions pt.02.01 Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:h:hp:officeconnect_1820_24g_switch_j9980a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
  • cpe:2.3:o:hp:officeconnect_1820_48g_poe\+_\(370w\)_switch_j9984a_firmware:*:*:*:*:*:*:*:* Versions pt.01.03 – pt.01.14 Vulnerable ·Hewlett Packard Enterprise
Show 8 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:hp:officeconnect_1820_48g_poe\+_\(370w\)_switch_j9984a_firmware:pt.02.01:*:*:*:*:*:*:*pt.02.01VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:officeconnect_1820_48g_poe\+_\(370w\)_switch_j9984a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:officeconnect_1820_48g_switch_j9981a_firmware:*:*:*:*:*:*:*:*pt.01.03 – pt.01.14VulnerableHewlett Packard Enterprise
cpe:2.3:o:hp:officeconnect_1820_48g_switch_j9981a_firmware:pt.02.01:*:*:*:*:*:*:*pt.02.01VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:officeconnect_1820_48g_switch_j9981a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:officeconnect_1820_8g_poe\+_\(65w\)_switch_j9982a_firmware:*:*:*:*:*:*:*:*pt.01.03 – pt.01.14VulnerableHewlett Packard Enterprise
cpe:2.3:o:hp:officeconnect_1820_8g_poe\+_\(65w\)_switch_j9982a_firmware:pt.02.01:*:*:*:*:*:*:*pt.02.01VulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:officeconnect_1820_8g_poe\+_\(65w\)_switch_j9982a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
  • cpe:2.3:o:hp:officeconnect_1820_48g_poe\+_\(370w\)_switch_j9984a_firmware:pt.02.01:*:*:*:*:*:*:* Versions pt.02.01 Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:h:hp:officeconnect_1820_48g_poe\+_\(370w\)_switch_j9984a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
  • cpe:2.3:o:hp:officeconnect_1820_48g_switch_j9981a_firmware:*:*:*:*:*:*:*:* Versions pt.01.03 – pt.01.14 Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:o:hp:officeconnect_1820_48g_switch_j9981a_firmware:pt.02.01:*:*:*:*:*:*:* Versions pt.02.01 Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:h:hp:officeconnect_1820_48g_switch_j9981a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
  • cpe:2.3:o:hp:officeconnect_1820_8g_poe\+_\(65w\)_switch_j9982a_firmware:*:*:*:*:*:*:*:* Versions pt.01.03 – pt.01.14 Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:o:hp:officeconnect_1820_8g_poe\+_\(65w\)_switch_j9982a_firmware:pt.02.01:*:*:*:*:*:*:* Versions pt.02.01 Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:h:hp:officeconnect_1820_8g_poe\+_\(65w\)_switch_j9982a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-5786
  2. 2026-10-03 Alias added: GHSA-j3w9-4qwp-6gq3

References

Advisory 1

  • TI-2022-17665 Path traversal in Hewlett Packard Enterprise (HPE) HPE OfficeConnect 1820 and 1850 Switch… CVSS 3.1HIGH 7.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences