CVE-2025-37102highCWE-77

CVE-2025-37102: falha de alta gravidade em Hewlett Packard Enterprise (HPE) HPE…

Authenticated Command Injection Vulnerability In Instant On Command Line Interface

Publicada em

Seguir esta CVE+ Monitorar HPE Networking Instant On

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.2epss 1.5%
An authenticated command injection vulnerability exists in the Command line interface of HPE Networking Instant On Access Points. A successful exploitation could allow a remote attacker with elevated privileges to execute arbitrary commands on the underlying operating system as a highly privileged user.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Hewlett Packard Enterprise (HPE) · HPE Networking Instant On
CVEs relacionadas — Hewlett Packard Enterprise (HPE) HPE…

No mesmo produto, das mais perigosas para as menos.

CVE-2025-37103CRITICALHardcoded Credential Exposure Allows Unauthorized Access in Web InterfaceEPSS 1.1%CVE-2026-44877MEDIUMUnauthenticated Remote Disclosure of Cryptographic SecretsEPSS 0.5%