Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2025-37103

Hardcoded Credential Exposure Allows Unauthorized Access in Web Interface

Description

Hard-coded login credentials were found in HPE Networking Instant On Access Points, allowing anyone with knowledge of it to bypass normal device authentication. Successful exploitation could allow a remote attacker to gain administrative access to the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hewlett Packard Enterprise (HPE) HPE Networking Instant On

Default version status: affected

  • 3.2.0.0 to ≤ 3.2.0.1affected

References