CVE-2024-22438: HPE OfficeConnect 1820 Network switches, Cross-Site Request Forgery (CSRF)

Severity: low (CVSS 3.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-04-15 · updated 2026-06-17
Weakness: CWE-352

Description

A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820 Network switches. The vulnerability could be remotely exploited to allow execution of malicious code.

Affected products

Hewlett Packard Enterprise HPE OfficeConnect 1820 Network switches: before PT.02.19 — fixed in PT.02.19

How to fix

Upgrade to a fixed version: Hewlett Packard Enterprise HPE OfficeConnect 1820 Network switches PT.02.19. Check the vendor advisory for mitigations.

References

https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbnw04628en_us
https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbnw04628en_us

Get alerted when CVE-2024-22438 or the next vulnerability affects your stack