CVE-2025-37166

Unexpected shutdown in HPE Instant On Access Points after processing specific packets

High · published January 13, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
39.8
In the wild
Unconfirmed
What it is

⚡ A single crafted packet could send your HPE Networking Instant On Access Points into a tailspin, making them completely non-responsive! 🚨 Think of it like a restaurant receiving a fake reservation that causes the kitchen to shut down entirely, leaving everyone waiting for service but nobody able to eat. This vulnerability is an invitation for chaos on your network! If exploited, this vulnerability could lead to a Denial-of-Service attack, meaning your network could go dark when you need it most. Imagine your team unable to connect just when the big presentation is about to start – absolutely devastating!

Put simply

Think of it like a restaurant receiving a fake reservation that causes the kitchen to shut down entirely, leaving everyone waiting for service but nobody able to eat. This vulnerability is an invitation for chaos on your network! CVE-2025-37166 involves HPE Networking Instant On Access Points that fail to handle specially crafted packets, resulting in complete unresponsiveness and requiring a hard reset to restore functionality.

What to do

If exploited, this vulnerability could lead to a Denial-of-Service attack, meaning your network could go dark when you need it most. Imagine your team unable to connect just when the big presentation is about to start – absolutely devastating! To mitigate this risk, ensure that your devices are updated with the latest firmware, available on HPE's website. Additionally, monitor network traffic for any unusual patterns that might indicate an attempted exploit. Don't let your guard down! You've got this! Stay proactive, and your network will remain robust and ready for anything. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00472 · 39.8th percentile
Published
2026-01-13T17:42Z
EPSS history
Timeline
  • 13 JAN 17:42Z
    Unexpected shutdown in HPE Instant On Access Points after processing specific packets
    cvelistv5