PT-2026-2451 · Hewlett Packard · Hpe Instant On Access Points

Published 2026-01-13 · Updated 2026-03-02 · CVE-2025-37165

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions HPE Instant On Access Points (affected versions not specified)

Description A flaw exists in the router mode configuration of HPE Instant On Access Points. This issue could allow a malicious actor to obtain knowledge of internal network configuration details by inspecting impacted packets. The vulnerability exposes certain network configuration details to unintended interfaces.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2025-37165

Affected Products

Hpe Instant On Access Points

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-37165 · Security Note
• https://twitter.com/ThreatSynop/status/2011762823450227070 · Twitter Post
• https://twitter.com/CVEnew/status/2011134133074788355 · Twitter Post
• https://t.me/cveNotify/153786 · Telegram Post
• https://twitter.com/Netlas_io/status/2013191039301906809 · Twitter Post
• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04988en_us&docLocale=en_US · Note