HPE Aruba Wi-Fi Devices Exposed: Hackers Can Hit “Instant On” for Instant Access
Hardcoded credentials in HPE Aruba Instant On Wi-Fi devices allow attackers to bypass authentication and access the web interface. With a CVSS score of 9.8, this flaw impacts devices running firmware version 3.2.0.1 and below. Firmware updates are available to fix this alarming oversight.
Hot Take:
Looks like Aruba’s Wi-Fi is serving more than just internet connections; it’s serving up a spicy dish of hardcoded credentials on a silver platter! Who knew your Wi-Fi could be as easy to crack as a fortune cookie? Let’s hope that fortune reads, ‘Update your firmware, pronto!’
Key Points:
- HPE Aruba Instant On Wi-Fi devices have hardcoded credentials, potentially allowing attackers to bypass authentication.
- The vulnerability, CVE-2025-37103, affects devices with firmware version 3.2.0.1 and below, scoring a whopping 9.8 on the CVSS scale.
- A firmware update to version 3.2.1.0 or newer is required to fix the issue.
- Another vulnerability, CVE-2025-37102, involves command injection in the Command Line Interface.
- No known public exploits or wild attacks have been reported for these vulnerabilities as of yet.
Already a member? Log in here