CVE-2025-37166: Hewlett Packard Enterprise HPE Instant On

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

A vulnerability affecting HPE Networking Instant On Access Points has been identified where a device processing a specially crafted packet could enter a non-responsive state, in some cases requiring a hard reset to re-establish services. A malicious actor could leverage this vulnerability to conduct a Denial-of-Service attack on a target network.

Affected products

• Hewlett Packard Enterprise HPE Instant On: from 3.0.0.0, up to and including 3.3.1.0

Published 2026-01-13. Last modified 2026-06-17.