CVE-2025-37111mediumCWE-798

CVE-2025-37111: medium-severity vulnerability in Hewlett Packard Enterprise HPE Telco Network…

Hard-Coded Authentication Keys found in System

Published

Follow this CVE+ Monitor HPE Telco Network Function Virtual Orchestrator

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6epss 0.2%
A vulnerability was discovered in the storage policy for certain sets of authentication keys in the HPE Telco Network Function Virtual Orchestrator. Successful Exploitation could lead to unauthorized parties gaining access to sensitive system information.
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Affected products
Hewlett Packard Enterprise · HPE Telco Network Function Virtual Orchestrator
Related CVEs — Hewlett Packard Enterprise HPE Telco Network…

In the same product, most dangerous first.

CVE-2025-37110MEDIUMSensitive Credential Information stored insecurely in System DatabaseEPSS 0.2%CVE-2025-37112MEDIUMHard-Coded Encryption Keys found in SystemEPSS 0.1%