CVE-2025-37102 — Authenticated Command Injection Vulnerability In Instant On Command Line Interface

CVE-2025-37102

Authenticated Command Injection Vulnerability In Instant On Command Line Interface PUBLISHED

Description (CNA)

An authenticated command injection vulnerability exists in the Command line interface of HPE Networking Instant On Access Points. A successful exploitation could allow a remote attacker with elevated privileges to execute arbitrary commands on the underlying operating system as a highly privileged user.

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / HPE Networking Instant On	affected 3.2.0.0 through 3.2.0.1

CWE

No CWE identifiers supplied.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04894en_us&docLocale=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.