Advisories · Technology
Hewlett Packard Enterprise (HPE) Instant ON.
Every CVE that names Hewlett Packard Enterprise (HPE) Instant ON among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 2.7 Low
Authenticated Buffer Overflow Vulnerability in the API Endpoint of HPE Networking Instant On Causes Denial-of-Service
- Hewlett Packard Enterprise (HPE) Instant ON
- Memory corruption
- CVSS 3.0 Low
Authenticated Local Path Traversal Vulnerability Leads to Denial-of-Service in HPE Networking Instant On
- Hewlett Packard Enterprise (HPE) Instant ON
- Path traversal
- CVSS 3.3 Low
Authenticated Local Buffer Overflow Vulnerability leads to Denial-of-Service in HPE Networking Instant On
- Hewlett Packard Enterprise (HPE) Instant ON
- Memory corruption
- CVSS 4.1 Medium
Authenticated Local Sensitive Information Disclosure in HPE Networking Instant On
- Hewlett Packard Enterprise (HPE) Instant ON
- Information disclosure
- CVSS 4.8 Medium
Unauthenticated Memory Corruption Vulnerability leads to Denial-of-Service in HPE Networking Instant On
- Hewlett Packard Enterprise (HPE) Instant ON
- Memory corruption
- CVSS 4.9 Medium
Authenticated Denial-of-Service Vulnerability in HPE Networking Instant On API Endpoint
- Hewlett Packard Enterprise (HPE) Instant ON
- Denial of service
- CVSS 6.4 Medium
Authenticated Local Privilege Escalation Vulnerability in a Daemon of HPE Networking Instant ON
- Hewlett Packard Enterprise (HPE) Instant ON
- Privilege escalation
- CVSS 6.5 Medium
Authentication Bypass in the Captive Portal of HPE Networking Instant On
- Hewlett Packard Enterprise (HPE) Instant ON
- Privilege escalation
- CVSS 6.5 Medium
Improper PAPI Packet handling leads to unauthorized access in HPE Networking Instant ON APs
- Hewlett Packard Enterprise (HPE) Instant ON
- Authentication bypass
- CVSS 6.6 Medium
Authenticated Format String Vulnerability allows Memory Corruption in HPE Networking Instant ON API Endpoint
- Hewlett Packard Enterprise (HPE) Instant ON
- Memory corruption
- CVSS 7.2 High
Authenticated Server-Side Request Forgery Leading to Remote Code Execution in HPE Networking Instant ON APs
- Hewlett Packard Enterprise (HPE) Instant ON
- Server-side request forgery (SSRF)
- CVSS 7.2 High
Authenticated Command Injection Vulnerabilities in HPE Networking Instant ON
- Hewlett Packard Enterprise (HPE) Instant ON
- Command injection
- CVSS 8.1 High
Authentication Bypass Leading to Unauthorized Network Access in HPE Networking Instant ON API Endpoint
- Hewlett Packard Enterprise (HPE) Instant ON
- Authentication bypass
- CVSS 9.6 CriticalCritical · CVSS 9+
Authentication Bypass in a Management Protocol of HPE Networking Instant ON APs
- Hewlett Packard Enterprise (HPE) Instant ON
- Authentication bypass
- CVSS 9.6 CriticalCritical · CVSS 9+
Unauthenticated Adjacent Command Injection Vulnerability in HPE Networking Instant ON APs Command Line Interface (CLI) Accessed by the PAPI Protocol
- Hewlett Packard Enterprise (HPE) Instant ON
- Command injection
- CVSS 9.6 CriticalCritical · CVSS 9+
Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking Instant ON APS
- Hewlett Packard Enterprise (HPE) Instant ON
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
Uncontrolled Format String Vulnerabilities lead to Remote Code Execution or Denial-of-Service in HPE Networking Instant ON APs
- Hewlett Packard Enterprise (HPE) Instant ON
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in HPE Networking Instant ON APs
- Hewlett Packard Enterprise (HPE) Instant ON
- Memory corruption
- CVSS 7.5 High
Unexpected shutdown in HPE Instant On Access Points after processing specific packets
- Hewlett Packard Enterprise (HPE) Instant On
- Denial of service
- CVSS 7.5 High
Exposure of VLAN information in unintended network interfaces
- Hewlett Packard Enterprise (HPE) Instant On
- Information disclosure