HPE Networking Instant On Access Points Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in HPE Networking Instant On Access Points running software version 3.3.1.0 and below. When the device processes a specially crafted packet, it can become unresponsive, often requiring a hard reset to restore normal functionality. This vulnerability could be exploited by a malicious actor to disrupt services on the affected network.

Impact

Exploitation of this vulnerability can lead to a denial-of-service condition, causing the access point to become unresponsive and potentially requiring a hard reset to restore normal operations.

Remediation

Users are advised to upgrade to HPE Networking Instant On software version 3.3.2.0 or above. Instant On devices began automatic updates during the week of December 10, 2025. For more information, visit the HPE Networking Support Portal.