HPE Networking Instant On vulnerabilities

2 known vulnerabilities in HPE Networking Instant On from Hewlett Packard Enterprise. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  HPE Networking Instant On: Use of Hard-coded Credentials

  CVE-2025-37103Jul 8, 2025Hewlett Packard EnterpriseEPSS 1.09%

  Hard-coded login credentials were found in HPE Networking Instant On Access Points, allowing anyone with knowledge of it to bypass normal device authentication. Successful exploitation could allow a remote attacker to gain administrative access to the system.

• 7.2 High severity

  HPE Networking Instant On: Improper Neutralization of Special Elements used in a Command

  CVE-2025-37102Jul 8, 2025Hewlett Packard EnterpriseEPSS 1.5%

  An authenticated command injection vulnerability exists in the Command line interface of HPE Networking Instant On Access Points. A successful exploitation could allow a remote attacker with elevated privileges to execute arbitrary commands on the underlying o