Skip to content
OpenAdvisories
Critical · 9.8 CVE-2025-37103 EUVD-2025-20682GHSA-5xp3-2ff8-9grr

Hardcoded Credential Exposure Allows Unauthorized Access in Web Interface

Published Jul 8, 2025 · Updated Jul 8, 2025 · Assigned by hpe

Description

Hard-coded login credentials were found in HPE Networking Instant On Access Points, allowing anyone with knowledge of it to bypass normal device authentication. Successful exploitation could allow a remote attacker to gain administrative access to the system.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) HPE Networking Instant On 3.2.0.0 – ≤ 3.2.0.1 —

References