CVE-2025-37103criticalCWE-798

CVE-2025-37103: falha crítica em Hewlett Packard Enterprise (HPE) HPE…

Hardcoded Credential Exposure Allows Unauthorized Access in Web Interface

Publicada em

Seguir esta CVE+ Monitorar HPE Networking Instant On

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.8epss 1.1%
Hard-coded login credentials were found in HPE Networking Instant On Access Points, allowing anyone with knowledge of it to bypass normal device authentication. Successful exploitation could allow a remote attacker to gain administrative access to the system.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Hewlett Packard Enterprise (HPE) · HPE Networking Instant On
CVEs relacionadas — Hewlett Packard Enterprise (HPE) HPE…

No mesmo produto, das mais perigosas para as menos.

CVE-2025-37102HIGHAuthenticated Command Injection Vulnerability In Instant On Command Line InterfaceEPSS 1.5%CVE-2026-44877MEDIUMUnauthenticated Remote Disclosure of Cryptographic SecretsEPSS 0.5%