CVE-2022-37934
Assigner: hpe
Published: 2023-01-03T18:33:15.954Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: HPE OfficeConnect 1820 and 1850 Switch Series
vendor: Hewlett Packard Enterprise (HPE)
versions: status: affected
version: Prior to PT.02.17; Prior to PC.01.23; Prior to PO.01.22
descriptions: supportingMedia: base64: no
type: text/html
value: <p>A potential security vulnerability has been identified in HPE OfficeConnect 1820, and 1850 switch series. The vulnerability could be remotely exploited to allow remote directory traversal in HPE OfficeConnect 1820 switch series version PT.02.17 and below, HPE OfficeConnect 1850 switch series version PC.01.23 and below, and HPE OfficeConnect 1850 (10G aggregator) switch version PO.01.22 and below.</p>
value: A potential security vulnerability has been identified in HPE OfficeConnect 1820, and 1850 switch series. The vulnerability could be remotely exploited to allow remote directory traversal in HPE OfficeConnect 1820 switch series version PT.02.17 and below, HPE OfficeConnect 1850 switch series version PC.01.23 and below, and HPE OfficeConnect 1850 (10G aggregator) switch version PO.01.22 and below.


metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.8
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: HIGH
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
version: 3.1
format: CVSS
scenarios: value: GENERAL
source: discovery: UNKNOWN
x_generator: engine: cveClient/1.0.13
problemTypes: descriptions: description: n/a
type: text