PT-2025-31579 · Hewlett Packard · Hpe Telco Network Function Virtual Orchestrator

CVE-2025-37112 · Published 2025-07-31 · Updated 2025-08-04

Positive Technologies (AI Summary)

CVSS v3.1

6.0

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions HPE Telco Network Function Virtual Orchestrator (affected versions not specified)

Description A vulnerability exists in the storage policy for certain sets of encryption keys. Successful exploitation could lead to unauthorized access to sensitive system information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2025-37112

Affected Products

Hpe Telco Network Function Virtual Orchestrator

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-37112 · Security Note
• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04891en_us · Note
• https://twitter.com/CVEnew/status/1951014684049510690 · Twitter Post
• https://t.me/cveNotify/130789 · Telegram Post
• https://t.me/CVEtracker/28893 · Telegram Post