CVE-2025-37103 — Hardcoded Credential Exposure Allows Unauthorized Access in Web Interface

CVE-2025-37103

Hardcoded Credential Exposure Allows Unauthorized Access in Web Interface PUBLISHED

Description (CNA)

Hard-coded login credentials were found in HPE Networking Instant On Access Points, allowing anyone with knowledge of it to bypass normal device authentication. Successful exploitation could allow a remote attacker to gain administrative access to the system.

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / HPE Networking Instant On	affected 3.2.0.0 through 3.2.0.1

CWE

No CWE identifiers supplied.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04894en_us&docLocale=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.