CVE-2017-5786: A local Unauthorized Data Modification vulnerability in HPE OfficeConnect Network Switches version PT.02.01...

Security readout for executives and security teams

CVE-2017-5786 is a locally exploitable unauthorized data modification issue affecting HPE OfficeConnect Network Switches on listed firmware versions. The public bundle does not provide a CVSS score, CWE, exploit details, or a named fixed version, so urgency depends on where these switches are deployed and who can access them locally. Exposure is limited to organizations operating HPE OfficeConnect Network Switches on the listed firmware versions. Local access is required according to the CVE description, reducing broad internet exposure but leaving risk from insiders, shared facilities, or attackers with an internal foothold. Medium operational attention is reasonable if affected switches manage sensitive or production networks. Because severity and fix details are absent from the provided data, this should be handled through asset validation and vendor-advisory review rather than emergency assumptions. Mitigation focus: Review the HPE advisory for corrected firmware, workarounds, or replacement guidance.; Limit local administrative and physical access to affected switches until vendor guidance is applied.; Back up switch configurations and monitor for unauthorized configuration or data changes..

Prepared

Jun 7, 2026, 14:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.