CVE-2025-37166 — Unexpected shutdown in HPE Instant On Access Points after processing specific packets

CVE-2025-37166

Unexpected shutdown in HPE Instant On Access Points after processing specific packets PUBLISHED

Description (CNA)

A vulnerability affecting HPE Networking Instant On Access Points has been identified where a device processing a specially crafted packet could enter a non-responsive state, in some cases requiring a hard reset to re-establish services. A malicious actor could leverage this vulnerability to conduct a Denial-of-Service attack on a target network.

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / Instant On	affected 3.0.0.0 through 3.3.1.0

CWE

No CWE identifiers supplied.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04988en_us&docLocale=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.