Skip to content
OpenAdvisories
High · 7.2 CVE-2025-37102 EUVD-2025-20683GHSA-65cw-h272-m27j

Authenticated Command Injection Vulnerability In Instant On Command Line Interface

Published Jul 8, 2025 · Updated Jul 8, 2025 · Assigned by hpe

Description

An authenticated command injection vulnerability exists in the Command line interface of HPE Networking Instant On Access Points.

A successful exploitation could allow a remote attacker with elevated privileges to execute arbitrary commands on the underlying operating system as a highly privileged user.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) HPE Networking Instant On 3.2.0.0 – ≤ 3.2.0.1 —

References