Read the docs
TI-2022-17663 Aliases CVE-2022-37932GHSA-gp8j-jhwq-pp4q

A potential security vulnerability has been identified in Hewlett Packard Enterprise…

Priority MEDIUM 48Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches. The vulnerability could be remotely exploited to allow authentication bypass. HPE has made the following software updates to resolve the vulnerability in Hewlett Packard Enterprise OfficeConnect 1820, 1850 and 1920S Network switches versions: Prior to PT.02.14; Prior to PC.01.22; Prior to PO.01.21; Prior to PD.02.22;

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.02931 87th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Hewlett Packard Enterprise (HPE)Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switchesPrior to PT.02.14; Prior to PC.01.22; Prior to PO.01.21; Prior to PD.02.22;—No fix listedCNA
  • Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches VendorHewlett Packard Enterprise (HPE) Affected Prior to PT.02.14; Prior to PC.01.22; Prior to PO.01.21; Prior to PD.02.22; Fixed in — No fix listed CNA

CPE configurations NVD · 38

CPEVersionsRoleVendor
cpe:2.3:o:hpe:officeconnect_1820_j9979a_firmware:*:*:*:*:*:*:*:*before pt.02.14VulnerableHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:officeconnect_1820_j9979a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:o:hpe:officeconnect_1820_j9982a_firmware:*:*:*:*:*:*:*:*before pt.02.14VulnerableHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:officeconnect_1820_j9982a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:o:hpe:officeconnect_1820_j9980a_firmware:*:*:*:*:*:*:*:*before pt.02.14VulnerableHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:officeconnect_1820_j9980a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:o:hpe:officeconnect_1820_j9983a_firmware:*:*:*:*:*:*:*:*before pt.02.14VulnerableHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:officeconnect_1820_j9983a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:o:hpe:officeconnect_1820_j9981a_firmware:*:*:*:*:*:*:*:*before pt.02.14VulnerableHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:officeconnect_1820_j9981a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
Show 28 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:hpe:officeconnect_1820_j9984a_firmware:*:*:*:*:*:*:*:*before pt.02.14VulnerableHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:officeconnect_1820_j9984a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:o:hpe:officeconnect_1850_24g_2xgt_poe\+_firmware:*:*:*:*:*:*:*:*before pc.01.22VulnerableHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:officeconnect_1850_24g_2xgt_poe\+:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:o:hpe:officeconnect_1850_24g_2xgt_firmware:*:*:*:*:*:*:*:*before pc.01.22VulnerableHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:officeconnect_1850_24g_2xgt:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:o:hpe:officeconnect_1850_48g_4xgt_poe\+_firmware:*:*:*:*:*:*:*:*before pc.01.22VulnerableHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:officeconnect_1850_48g_4xgt_poe\+:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:o:hpe:officeconnect_1850_48g_4xgt_firmware:*:*:*:*:*:*:*:*before pc.01.22VulnerableHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:officeconnect_1850_48g_4xgt:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:o:hpe:officeconnect_1850_6xgt_firmware:*:*:*:*:*:*:*:*before po.01.21VulnerableHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:officeconnect_1850_6xgt:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:o:hpe:officeconnect_1850_2xgt\/spf\+_firmware:*:*:*:*:*:*:*:*before po.01.21VulnerableHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:officeconnect_1850_2xgt\/spf\+:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:o:hpe:officeconnect_1920s_24g_2sfp_poe\+_firmware:*:*:*:*:*:*:*:*before pd.02.22VulnerableHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:officeconnect_1920s_24g_2sfp_poe\+:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:o:hpe:officeconnect_1920s_24g_2sfp_ppoe\+_firmware:*:*:*:*:*:*:*:*before pd.02.22VulnerableHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:officeconnect_1920s_24g_2sfp_ppoe\+:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:o:hpe:officeconnect_1920s_24g_2sfp_firmware:*:*:*:*:*:*:*:*before pd.02.22VulnerableHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:officeconnect_1920s_24g_2sfp:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:o:hpe:officeconnect_1920s_48g_4sfp_ppoe\+_firmware:*:*:*:*:*:*:*:*before pd.02.22VulnerableHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:officeconnect_1920s_48g_4sfp_ppoe\+:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:o:hpe:officeconnect_1920s_48g_4sfp_firmware:*:*:*:*:*:*:*:*before pd.02.22VulnerableHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:officeconnect_1920s_48g_4sfp:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:o:hpe:officeconnect_1920s_8g_ppoe\+_firmware:*:*:*:*:*:*:*:*before pd.02.22VulnerableHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:officeconnect_1920s_8g_ppoe\+:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:o:hpe:officeconnect_1920s_8g_firmware:*:*:*:*:*:*:*:*before pd.02.22VulnerableHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:officeconnect_1920s_8g:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-37932
  2. 2026-10-03 Alias added: GHSA-gp8j-jhwq-pp4q

References

Advisory 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences