CVE-2025-37102

HIGH

HPE Networking Instant On Access Points - Command Injection

Title source: llm

Description

An authenticated command injection vulnerability exists in the Command line interface of HPE Networking Instant On Access Points. A successful exploitation could allow a remote attacker with elevated privileges to execute arbitrary commands on the underlying operating system as a highly privileged user.

References (1)

Core 1

Core References

Vendor Advisory

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04894en_us&docLocale=en_US

Scores

CVSS v3 7.2

EPSS 0.0147

EPSS Percentile 70.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-77

Status published

Products (1)

Hewlett Packard Enterprise (HPE)/HPE Networking Instant On 3.2.0.0 - 3.2.0.1

Published Jul 08, 2025

Tracked Since Feb 18, 2026