HPE Networking Instant On Access Points Hard-Coded Credential Vulnerability Allowing Administrative Access

A vulnerability exists in HPE Networking Instant On Access Points running software version 3.2.0.1 and below, due to hard-coded login credentials that bypass normal authentication. This flaw allows remote attackers to gain administrative access to the devices.

Impact

Exploitation of this vulnerability could lead to unauthorized administrative access on the affected access points.

Remediation

Users are advised to upgrade to HPE Networking Instant On software version 3.2.1.0 and above. Instant On devices began automatic updates the week of June 30, 2025, but manual upgrades can be initiated via the Instant On app or web portal after the release date.