CVE-2025-37165

Exposure of VLAN information in unintended network interfaces

High · published January 13, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
34.0
In the wild
Unconfirmed
What it is

⚡ A sneaky misconfiguration in HPE Instant On Access Points could expose critical network details to unintended interfaces — think of it as letting a stranger peek at your Wi-Fi settings! 🔍 Imagine you have a secure vault, but someone accidentally left the door ajar. An unsuspecting passerby might catch a glimpse of the valuable items inside, just like packets revealing sensitive network details if not properly secured. This vulnerability could allow a malicious actor to gather sensitive internal network configuration details, putting your whole system at risk of exploitation. With this information, they could plan further attacks, potentially leading to a full network compromise. The stakes couldn't be higher!

Put simply

Imagine you have a secure vault, but someone accidentally left the door ajar. An unsuspecting passerby might catch a glimpse of the valuable items inside, just like packets revealing sensitive network details if not properly secured. In the router mode configuration of HPE Instant On Access Points, certain network configuration details are exposed due to improper handling of impacted packets, allowing unauthorized access to sensitive information.

What to do

This vulnerability could allow a malicious actor to gather sensitive internal network configuration details, putting your whole system at risk of exploitation. With this information, they could plan further attacks, potentially leading to a full network compromise. The stakes couldn't be higher! Update your HPE Instant On Access Points to the latest firmware version immediately to close this security gap. Additionally, review your network configurations and ensure that any sensitive details are not accessible through unintended interfaces. Regularly audit your network for any other vulnerabilities that may arise. You've got this! Patch up your systems and keep your network secure. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00408 · 34.0th percentile
Published
2026-01-13T17:40Z
EPSS history
Timeline
  • 13 JAN 17:40Z
    Exposure of VLAN information in unintended network interfaces
    cvelistv5