Is CVE-2022-37934 actively exploited?

No active exploitation of CVE-2022-37934 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2022-37934 be exploited remotely?

Yes. CVE-2022-37934 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2022-37934?

CVE-2022-37934 has a CVSS score of 7.5 (HIGH).

HOME VULNERABILITIESCVE-2022-37934

HIGH

CVE-2022-37934

CWE-22Published: January 5, 2023· Updated: Jun 17, 2026

7.5

CVSS v3.1

Official Description

A potential security vulnerability has been identified in HPE OfficeConnect 1820, and 1850 switch series. The vulnerability could be remotely exploited to allow remote directory traversal in HPE OfficeConnect 1820 switch series version PT.02.17 and below, HPE OfficeConnect 1850 switch series version PC.01.23 and below, and HPE OfficeConnect 1850 (10G aggregator) switch version PO.01.22 and below.

NVD Source

Technical Analysis

CVE-2022-37934 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), with a CVSS base score of 7.5.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorNetwork

Attack ComplexityLow

Privileges Req.None

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityHigh

IntegrityNone

AvailabilityNone

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected Vendors & Products

HP8 product(s)

officeconnect 1820 24g poe\+ \(185w\) switch j9983a firmwareofficeconnect 1820 24g poe\+ \(185w\) switch j9983aofficeconnect 1820 48g poe\+ \(370w\) switch j9984a firmwareofficeconnect 1820 48g poe\+ \(370w\) switch j9984aofficeconnect 1820 8g poe\+ \(65w\) switch j9982a firmwareofficeconnect 1820 8g poe\+ \(65w\) switch j9982aofficeconnect 1820 8g switch j9979a firmwareofficeconnect 1820 8g switch j9979a

hpe12 product(s)

officeconnect 1850 24g 2xgt firmwareofficeconnect 1850 24g 2xgtofficeconnect 1850 24g 2xgt poe\+ firmwareofficeconnect 1850 24g 2xgt poe\+officeconnect 1850 2xgt\/spf\+ firmwareofficeconnect 1850 2xgt\/spf\+officeconnect 1850 48g 4xgt firmwareofficeconnect 1850 48g 4xgtofficeconnect 1850 48g 4xgt poe\+ firmwareofficeconnect 1850 48g 4xgt poe\+officeconnect 1850 6xgt firmwareofficeconnect 1850 6xgt

Source: NVD CPE · 20 total CPE entries