HPE Instant On Access Points Network Configuration Exposure Vulnerability

A vulnerability exists in the router mode configuration of HPE Instant On Access Points running software version 3.3.1.0 and below. This vulnerability allows the unintentional exposure of certain network configuration details to unintended interfaces. A malicious actor could inspect affected packets to gain knowledge of internal network configurations.

Impact

Exploitation of this vulnerability could lead to unauthorized knowledge of internal network configuration details.

Remediation

Users are advised to upgrade to HPE Networking Instant On software version 3.3.2.0 or above. For HPE Networking Instant On Access Points, the update will be applied automatically starting the week of December 10, 2025. Manual upgrades can be initiated via the Instant On app or web portal after the release date.