What’s Vulnerable › Vulnerabilities

CVE-2025-37165: Exposure of VLAN information in unintended network interfaces

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-01-13 · updated 2026-06-17
• Weakness: CWE-200

Description

A vulnerability in the router mode configuration of HPE Instant On Access Points exposed certain network configuration details to unintended interfaces. A malicious actor could gain knowledge of internal network configuration details through inspecting impacted packets.

Affected products

• Hewlett Packard Enterprise (HPE) Instant ON: from 3.0.0.0 through 3.3.1.0

References

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04988en_us&docLocale=en_US

Get alerted when CVE-2025-37165 or the next vulnerability affects your stack