Gbhackers

HPE Aruba Vulnerabilities Enable Unauthorized Access to Sensitive Information

First seen 15 Jan 2026, 18:00 UTC • Cybersecuritynews

•91% similarity •30.6

Ask AI about this cluster

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Hewlett Packard Enterprise (HPE) disclosed four high-severity vulnerabilities in its Aruba Networking Instant On devices, allowing unauthorized access to sensitive network information. The vulnerabilities, identified as CVE-2025-37165, CVE-2025-37166, CVE-2023-52340, and CVE-2022-48839, affect devices running software version 3.3.1.0 and earlier.

ThreatCluster AI How this analysis works

Attack Flow

9 entities, 8 inferred relationships (STIX 2.1).

Technique (1)

Malware

Organization (3)

Hewlett Packard Enterprise
HPE
Aruba

Vulnerability (4)

CVE-2022-48839
CVE-2023-52340
CVE-2025-37165
CVE-2025-37166

Affected Platform (1)

Aruba Networking Instant On

Relationships

CVE-2022-48839 targets Aruba Networking Instant On
CVE-2023-52340 targets Aruba Networking Instant On
CVE-2025-37165 targets Aruba Networking Instant On
CVE-2025-37166 targets Aruba Networking Instant On
Malware targets Aruba Networking Instant On
CVE-2022-48839 related to Hewlett Packard Enterprise
CVE-2022-48839 related to HPE
CVE-2022-48839 related to Aruba

Community

Browse all →

Tracked Entities in This Story

Hewlett Packard Enterprise HPE Aruba Aruba Networking Instant On

HPE Aruba Vulnerabilities Enable Unauthorized Access to Sensitive Information

Ask AI about this cluster

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Community

Continue Reading

Tracked Entities in This Story