Skip to content
OpenAdvisories
Medium · 6.0 CVE-2025-37112 EUVD-2025-23308GHSA-r8fm-999q-9fw9

Hard-Coded Encryption Keys found in System

Published Jul 31, 2025 · Updated Jul 31, 2025 · Assigned by hpe

Description

A vulnerability was discovered in the storage policy for certain sets of encryption keys in the HPE Telco Network Function Virtual Orchestrator. Successful Exploitation could lead to unauthorized parties gaining access to sensitive system information.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise HPE Telco Network Function Virtual Orchestrator 7.0.0 – ≤ 7.3.0 —

References