CVE:CVE-2022-37934
CNNVD:CNNVD-202301-335
Hewlett Packard Enterprise OfficeConnect是美国慧与（Hewlett Packard Enterprise）公司的一系列交换机。
Hewlett Packard Enterprise OfficeConnect 存在安全漏洞。攻击者利用该漏洞可以读取运行应用程序的服务器上的任意文件。以下产品及版本受到影响：HPE OfficeConnect 1820交换机系列 PT.02.17版本及之前版本、HPE OfficeConnect 1850交换机系列 PC.01.23版本及之前版本、HPE Officeconnect 1850（10G聚合器）交换机 PO.01.22版本及之前版本。
solution:Upgrade hp officeconnect_1820_24g_poe+_(185w)_switch_j9983a_firmware to a higher version than pt.02.17,and avoid the version (,pt.02.17); Upgrade hp officeconnect_1820_48g_poe+_(370w)_switch_j9984a_firmware to a higher version than pt.02.17,and avoid the version (,pt.02.17); Upgrade hp officeconnect_1820_8g_poe+_(65w)_switch_j9982a_firmware to a higher version than pt.02.17,and avoid the version (,pt.02.17); Upgrade hp officeconnect_1820_8g_switch_j9979a_firmware to a higher version than pt.02.17,and avoid the version (,pt.02.17); Upgrade hpe officeconnect_1850_24g_2xgt_firmware to a higher version than pc.01.23,and avoid the version (,pc.01.23); Upgrade hpe officeconnect_1850_24g_2xgt_poe+_firmware to a higher version than pc.01.23,and avoid the version (,pc.01.23); Upgrade hpe officeconnect_1850_2xgt/spf+_firmware to a higher version than po.01.22,and avoid the version (,po.01.22); Upgrade hpe officeconnect_1850_48g_4xgt_firmware to a higher version than pc.01.23,and avoid the version (,pc.01.23); Upgrade hpe officeconnect_1850_48g_4xgt_poe+_firmware to a higher version than pc.01.23,and avoid the version (,pc.01.23); Upgrade hpe officeconnect_1850_6xgt_firmware to a higher version than pc.01.23,and avoid the version (,pc.01.23)