Unauthenticated Adjacent Command Injection Vulnerability in HPE Networking Instant ON APs Command Line Interface (CLI) Accessed by the PAPI Protocol (Hewlett Packard Enterprise (HPE) Instant ON)
At a glance
- Source
- NVD
- EPSS
- EPSS 1.02 % · percentile 64 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- hpe
- NVD status
- Awaiting Analysis
Description
A command injection vulnerability exists in CLI of the affected HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to perform command injection by sending specially crafted packets. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system.
Weaknesses (CWE)
- CWE-77 — Improper Neutralization of Special Elements used in a Command
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | CRITICAL 9.6 | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H | hpe |
| CVSS 3.1 | CRITICAL 9.6 | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H | NVD · security-alert@hpe.com (Secondary) |
European references
- ENISA EUVD · EUVD-2026-89343
- GCVE · GCVE-0-2026-76724
CERT-FR advisories
- CERTFR-2026-AVI-1238 — Multiples vulnérabilités dans HPE Aruba Networking Instant On · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Hewlett Packard Enterprise (HPE) · Instant ON | affected 0.0.0.0 ≤ 3.4.1.0 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |