CVE-2022-37932
Estado: ModificadaCrítica (9.8)—💥 Exploit
Detalles técnicos trazas, registros y código del informe original
A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches. The vulnerability could be remotely exploited to allow authentication bypass. HPE has made the following software updates to resolve the vulnerability in Hewlett Packard Enterprise OfficeConnect 1820, 1850 and 1920S Network switches versions: Prior to PT.02.14; Prior to PC.01.22; Prior to PO.01.21; Prior to PD.02.22;
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 9.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 2.81%
- Percentil entre todas las CVEs puntuadas: 86
- Fecha de la puntuación: 7/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
💥 Exploits públicos
Hay código de explotación o plantillas de detección públicos. No es lo mismo que explotación activa confirmada (KEV), pero aumenta el riesgo: parchee con prioridad.
- Plantilla de Nuclei (detección automática y masiva) · HP Switch - Authentication Bypass
- Prueba de concepto en GitHub (no verificada) · Lista de pruebas de concepto en GitHub
⚠️ Las pruebas de concepto de GitHub no están verificadas: algunas son falsas o contienen malware. No las ejecute nunca fuera de un laboratorio aislado.
Tecnologías afectadas (19)
HPE — Officeconnect 1820 J9979a FirmwareHPE — Officeconnect 1820 J9980a FirmwareHPE — Officeconnect 1820 J9981a FirmwareHPE — Officeconnect 1820 J9982a FirmwareHPE — Officeconnect 1820 J9983a FirmwareHPE — Officeconnect 1820 J9984a FirmwareHPE — Officeconnect 1850 24G 2xgt FirmwareHPE — Officeconnect 1850 24G 2xgt Poe+ FirmwareHPE — Officeconnect 1850 2xgt/spf+ FirmwareHPE — Officeconnect 1850 48G 4xgt FirmwareHPE — Officeconnect 1850 48G 4xgt Poe+ FirmwareHPE — Officeconnect 1850 6xgt FirmwareHPE — Officeconnect 1920s 24G 2sfp FirmwareHPE — Officeconnect 1920s 24G 2sfp Poe+ FirmwareHPE — Officeconnect 1920s 24G 2sfp Ppoe+ FirmwareHPE — Officeconnect 1920s 48G 4sfp FirmwareHPE — Officeconnect 1920s 48G 4sfp Ppoe+ FirmwareHPE — Officeconnect 1920s 8G FirmwareHPE — Officeconnect 1920s 8G Ppoe+ Firmware
CWE
- NVD-CWE-noinfo
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2022-37932",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2022-37932",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"version": "2.0.3",
"timestamp": "2025-04-24T18:35:07.362377Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "security-alert@hpe.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 8.8,
"attackVector": "ADJACENT_NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 2.8
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 9.8,
"attackVector": "NETWORK",
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "security-alert@hpe.com",
"affectedData": [
{
"vendor": "Hewlett Packard Enterprise (HPE)",
"product": "Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches",
"versions": [
{
"status": "affected",
"version": "Prior to PT.02.14; Prior to PC.01.22; Prior to PO.01.21; Prior to PD.02.22;"
}
],
"defaultStatus": "unaffected"
}
]
}
],
"published": "2022-12-12T13:15:14.360",
"references": [
{
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04383en_us",
"tags": [
"Vendor Advisory"
],
"source": "security-alert@hpe.com"
},
{
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04383en_us",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches. The vulnerability could be remotely exploited to allow authentication bypass. HPE has made the following software updates to resolve the vulnerability in Hewlett Packard Enterprise OfficeConnect 1820, 1850 and 1920S Network switches versions: Prior to PT.02.14; Prior to PC.01.22; Prior to PO.01.21; Prior to PD.02.22;\n\n"
},
{
"lang": "es",
"value": "Se ha identificado una posible vulnerabilidad de seguridad en los conmutadores de red Hewlett Packard Enterprise OfficeConnect 1820, 1850 y 1920S. La vulnerabilidad podría explotarse de forma remota para permitir omitir la autenticación. HPE ha realizado las siguientes actualizaciones de software para resolver la vulnerabilidad en las versiones de los conmutadores de red Hewlett Packard Enterprise OfficeConnect 1820, 1850 y 1920S: anteriores a PT.02.14; Antes de PC.01.22; Antes de PO.01.21; Antes del PD.02.22;"
}
],
"lastModified": "2026-06-17T04:55:43.603",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hpe:officeconnect_1820_j9979a_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BFAABEF2-F55F-49FE-9BDB-E6A07F3B9668",
"versionEndExcluding": "pt.02.14"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hpe:officeconnect_1820_j9979a:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A7F9F10C-0FD7-4224-8604-D40772A6D325"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hpe:officeconnect_1820_j9982a_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CD349A82-736E-48AB-A16F-B7F09A540AF5",
"versionEndExcluding": "pt.02.14"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hpe:officeconnect_1820_j9982a:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7647988C-38C0-4866-9D14-EB0A5380FF85"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hpe:officeconnect_1820_j9980a_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "84C2E422-9A0E-4D91-93BE-C4DD0083CA65",
"versionEndExcluding": "pt.02.14"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hpe:officeconnect_1820_j9980a:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "CC221BBC-AFD9-4115-A4A6-ACB64E8B1498"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hpe:officeconnect_1820_j9983a_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7A8AE93C-B333-430E-B5FE-E072EAB83599",
"versionEndExcluding": "pt.02.14"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hpe:officeconnect_1820_j9983a:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "BDDC1474-AC0F-4A9D-AE34-3C1037346A9D"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hpe:officeconnect_1820_j9981a_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "39DD62A3-CE10-4343-BDC4-73A84E892F13",
"versionEndExcluding": "pt.02.14"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hpe:officeconnect_1820_j9981a:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FFAE1036-E1F0-46EE-8FA3-0204299258C0"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hpe:officeconnect_1820_j9984a_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F6467F62-F15A-469B-BEC5-9E11A242B6FC",
"versionEndExcluding": "pt.02.14"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hpe:officeconnect_1820_j9984a:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "88C9CDFE-A010-4B48-A7C0-493D82B654F8"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hpe:officeconnect_1850_24g_2xgt_poe\\+_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "66948DB9-F00D-40A4-8B32-B6E49A24FA25",
"versionEndExcluding": "pc.01.22"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hpe:officeconnect_1850_24g_2xgt_poe\\+:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C1384A4C-5F0A-4F34-BB26-BFD9CDE56C1A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hpe:officeconnect_1850_24g_2xgt_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3377E5AB-1864-4465-AD35-616E1A806384",
"versionEndExcluding": "pc.01.22"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hpe:officeconnect_1850_24g_2xgt:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3DF9BC87-425B-4965-B0BB-9B11B6BE5DAE"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hpe:officeconnect_1850_48g_4xgt_poe\\+_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "34F06E1A-4EFE-41EA-97C6-7139DD013AFB",
"versionEndExcluding": "pc.01.22"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hpe:officeconnect_1850_48g_4xgt_poe\\+:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "34CC05B8-2AC3-4379-8E27-B771F520EF97"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hpe:officeconnect_1850_48g_4xgt_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5EDD55A8-3C69-4B53-A3C0-F0E2A9B4692A",
"versionEndExcluding": "pc.01.22"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hpe:officeconnect_1850_48g_4xgt:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5DD61C53-261D-4155-800E-CE5709BFAA90"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hpe:officeconnect_1850_6xgt_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6F0CBEF7-0963-45F9-B4A5-DC04909D4B12",
"versionEndExcluding": "po.01.21"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hpe:officeconnect_1850_6xgt:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2A0AAED7-FCBB-40E6-9649-617F1CD62A34"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hpe:officeconnect_1850_2xgt\\/spf\\+_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5A208318-52FA-4E1F-A62E-F2667CE9F132",
"versionEndExcluding": "po.01.21"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hpe:officeconnect_1850_2xgt\\/spf\\+:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "90F00E23-350B-4117-96E4-A342790992B8"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hpe:officeconnect_1920s_24g_2sfp_poe\\+_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "410FE7C9-6757-4B7D-88C7-5FAB7E11F970",
"versionEndExcluding": "pd.02.22"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hpe:officeconnect_1920s_24g_2sfp_poe\\+:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "75407C01-1A83-43A4-9C75-6EBDED3DE676"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hpe:officeconnect_1920s_24g_2sfp_ppoe\\+_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "422F8D41-CA36-42A1-9201-F7D438E30BB6",
"versionEndExcluding": "pd.02.22"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hpe:officeconnect_1920s_24g_2sfp_ppoe\\+:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E44086E4-506F-44D6-95A7-112BFD8AB2EC"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hpe:officeconnect_1920s_24g_2sfp_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "21CC988D-9798-4131-8DBA-D769EAC50F17",
"versionEndExcluding": "pd.02.22"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hpe:officeconnect_1920s_24g_2sfp:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "82FC497B-C6D9-46E9-AC07-0AFED63A7FD4"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hpe:officeconnect_1920s_48g_4sfp_ppoe\\+_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FCE3C410-DCA7-44E4-9425-B9ABBAAB68E1",
"versionEndExcluding": "pd.02.22"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hpe:officeconnect_1920s_48g_4sfp_ppoe\\+:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E26FF87F-A734-4E79-B08D-7FB97564DF99"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hpe:officeconnect_1920s_48g_4sfp_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FF9C79BA-8094-4976-B9A0-BC9008A3AE57",
"versionEndExcluding": "pd.02.22"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hpe:officeconnect_1920s_48g_4sfp:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C916A687-153B-42D6-95A7-2B6CC39E36C7"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hpe:officeconnect_1920s_8g_ppoe\\+_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A4991134-1AC5-401E-B942-486CB7B9D184",
"versionEndExcluding": "pd.02.22"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hpe:officeconnect_1920s_8g_ppoe\\+:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "BA52CA14-46DC-4C72-92D8-F065500E0F64"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hpe:officeconnect_1920s_8g_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "295C6B0F-83E7-4242-BF64-968B8D2536DE",
"versionEndExcluding": "pd.02.22"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hpe:officeconnect_1920s_8g:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0686F303-D228-4D0A-8648-67930EFA8395"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "security-alert@hpe.com"
}