An authentication bypass vulnerability exists in the PAPI protocol of HPE Networking Instant ON APs, allowing an unauthenticated adjacent attacker to circumvent existing authentication controls. By sending specially crafted packets, the attacker can avoid the device’s authentication mechanisms and inject unauthorized network traffic. This can lead to the compromise of device configuration, data leakage, or the use of the device as a platform for further attacks on the network.

Hewlett Packard Enterprise Instant ON networking access points are affected. No specific firmware or hardware version is listed in the available data, so all deployments of HPE Instant ON APs that support the PAPI protocol are potentially vulnerable.

The CVSS score is 6.5, indicating a medium severity vulnerability. The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is a local or adjacent attacker with network access to the PAPI interface. Successful exploitation requires the ability to send arbitrary PAPI packets to the device, which does not necessitate prior user credentials or privileged access. Because the attacker can avoid authentication, the impact includes unauthorized traffic injection and potential service disruption.