[security bulletin] HPESBHF03704 rev.1 - HPE OfficeConnect Network Switches, Local Unauthorized Data Modification
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