CVE-2022-37934
Status: ModifiedHigh (7.5)—
A potential security vulnerability has been identified in HPE OfficeConnect 1820, and 1850 switch series. The vulnerability could be remotely exploited to allow remote directory traversal in HPE OfficeConnect 1820 switch series version PT.02.17 and below, HPE OfficeConnect 1850 switch series version PC.01.23 and below, and HPE OfficeConnect 1850 (10G aggregator) switch version PO.01.22 and below.
CVSS
- Version: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Base score: 7.5
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 1.76%
- Percentile among all scored CVEs: 77
- Score date: 10/6/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (10)
HP — Officeconnect 1820 24G Poe+ (185w) Switch J9983a FirmwareHP — Officeconnect 1820 48G Poe+ (370w) Switch J9984a FirmwareHP — Officeconnect 1820 8G Poe+ (65w) Switch J9982a FirmwareHP — Officeconnect 1820 8G Switch J9979a FirmwareHPE — Officeconnect 1850 24G 2xgt FirmwareHPE — Officeconnect 1850 24G 2xgt Poe+ FirmwareHPE — Officeconnect 1850 2xgt/spf+ FirmwareHPE — Officeconnect 1850 48G 4xgt FirmwareHPE — Officeconnect 1850 48G 4xgt Poe+ FirmwareHPE — Officeconnect 1850 6xgt Firmware
CWEs
- CWE-22
- CWE-22
References
Raw JSON (NVD)
Show
{
"id": "CVE-2022-37934",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2022-37934",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2025-04-10T15:42:41.310394Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "security-alert@hpe.com",
"cvssData": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 6.8,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "HIGH",
"confidentialityImpact": "HIGH"
},
"impactScore": 4,
"exploitabilityScore": 2.3
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.5,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 3.6,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "security-alert@hpe.com",
"affectedData": [
{
"vendor": "Hewlett Packard Enterprise (HPE)",
"product": "HPE OfficeConnect 1820 and 1850 Switch Series",
"versions": [
{
"status": "affected",
"version": "Prior to PT.02.17; Prior to PC.01.23; Prior to PO.01.22"
}
],
"defaultStatus": "unaffected"
}
]
}
],
"published": "2023-01-05T07:15:10.257",
"references": [
{
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04401en_us",
"tags": [
"Vendor Advisory"
],
"source": "security-alert@hpe.com"
},
{
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04401en_us",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-22"
}
]
},
{
"type": "Secondary",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"description": [
{
"lang": "en",
"value": "CWE-22"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A potential security vulnerability has been identified in HPE OfficeConnect 1820, and 1850 switch series. The vulnerability could be remotely exploited to allow remote directory traversal in HPE OfficeConnect 1820 switch series version PT.02.17 and below, HPE OfficeConnect 1850 switch series version PC.01.23 and below, and HPE OfficeConnect 1850 (10G aggregator) switch version PO.01.22 and below.\n\n"
},
{
"lang": "es",
"value": "Se ha identificado una posible vulnerabilidad de seguridad en las series de conmutadores HPE OfficeConnect 1820 y 1850. La vulnerabilidad podría explotarse de forma remota para permitir el directory traversal de manera remota en la versión PT.02.17 y anteriores de la serie de conmutadores HPE OfficeConnect 1820, la versión PC.01.23 y posteriores de la serie de conmutadores HPE OfficeConnect 1850 y la versión PO.01.22 y PO.01.22 de la serie de conmutadores HPE OfficeConnect 1850 (agregador 10G). abajo."
}
],
"lastModified": "2026-06-17T04:55:44.717",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hp:officeconnect_1820_24g_poe\\+_\\(185w\\)_switch_j9983a_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9DB33F73-2104-4D29-B92F-E2E4C3EE2E54",
"versionEndExcluding": "pt.02.17"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hp:officeconnect_1820_24g_poe\\+_\\(185w\\)_switch_j9983a:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5264853E-2649-4C44-B078-796A02BC53B7"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hp:officeconnect_1820_48g_poe\\+_\\(370w\\)_switch_j9984a_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "83B4E0B4-C6EE-470F-A2D5-9621FD2829D0",
"versionEndExcluding": "pt.02.17"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hp:officeconnect_1820_48g_poe\\+_\\(370w\\)_switch_j9984a:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "19B37EFA-2611-443A-B1EB-2687D6BD5C2A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hp:officeconnect_1820_8g_poe\\+_\\(65w\\)_switch_j9982a_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CE77545A-B7D1-4489-87F5-1404BAA66AEB",
"versionEndExcluding": "pt.02.17"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hp:officeconnect_1820_8g_poe\\+_\\(65w\\)_switch_j9982a:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "78A4E198-C861-4961-8AF4-23BEAB22DBF2"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hp:officeconnect_1820_8g_switch_j9979a_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "917D4AE7-9EBD-431C-A637-C5F9CB87F2E4",
"versionEndExcluding": "pt.02.17"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hp:officeconnect_1820_8g_switch_j9979a:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A6829C8C-511C-4BD7-BC9A-215D34B025E1"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hpe:officeconnect_1850_24g_2xgt_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E5B71880-1BE7-4978-8B0B-78E2B30630A0",
"versionEndExcluding": "pc.01.23"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hpe:officeconnect_1850_24g_2xgt:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3DF9BC87-425B-4965-B0BB-9B11B6BE5DAE"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hpe:officeconnect_1850_24g_2xgt_poe\\+_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EEB0330A-A8F8-4B10-AA32-072D66E815E5",
"versionEndExcluding": "pc.01.23"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hpe:officeconnect_1850_24g_2xgt_poe\\+:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C1384A4C-5F0A-4F34-BB26-BFD9CDE56C1A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hpe:officeconnect_1850_2xgt\\/spf\\+_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9110CF1C-484C-4974-90F4-A1D91FCDD0B5",
"versionEndExcluding": "po.01.22"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hpe:officeconnect_1850_2xgt\\/spf\\+:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "90F00E23-350B-4117-96E4-A342790992B8"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hpe:officeconnect_1850_48g_4xgt_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B2C5EAAF-BC29-487E-B1BA-15E2E1BC75BE",
"versionEndExcluding": "pc.01.23"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hpe:officeconnect_1850_48g_4xgt:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5DD61C53-261D-4155-800E-CE5709BFAA90"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hpe:officeconnect_1850_48g_4xgt_poe\\+_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "64565539-4629-42A0-BC97-E88D5C692034",
"versionEndExcluding": "pc.01.23"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hpe:officeconnect_1850_48g_4xgt_poe\\+:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "34CC05B8-2AC3-4379-8E27-B771F520EF97"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hpe:officeconnect_1850_6xgt_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8B255A45-60D8-4E18-9005-9A666704B227",
"versionEndExcluding": "pc.01.23"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hpe:officeconnect_1850_6xgt:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2A0AAED7-FCBB-40E6-9649-617F1CD62A34"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "security-alert@hpe.com"
}