Skip to content
OpenAdvisories
Medium · 6.0 CVE-2025-37111 EUVD-2025-23307GHSA-rgc6-fx99-2prh

Hard-Coded Authentication Keys found in System

Published Jul 31, 2025 · Updated Jul 31, 2025 · Assigned by hpe

Description

A vulnerability was discovered in the storage policy for certain sets of authentication keys in the HPE Telco Network Function Virtual Orchestrator. Successful Exploitation could lead to unauthorized parties gaining access to sensitive system information.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise HPE Telco Network Function Virtual Orchestrator 7.0.0 – ≤ 7.3.0 —

References