Encryption Key Storage Flaw in HPE Telco Network Function Virtual Orchestrator
CVE-2025-37112

6MEDIUM

Key Information:

Vendor

HP
Status
HP Telco Network Function Virtual Orchestrator
Vendor
CVE Published:
31 July 2025

What is CVE-2025-37112?

A significant security issue has been identified in the storage policy for encryption keys within the HPE Telco Network Function Virtual Orchestrator. This vulnerability allows unauthorized users to potentially gain access to sensitive system information. Organizations using affected versions of the orchestrator should take urgent actions to mitigate risks associated with unauthorized data access. It is recommended to review the encryption key management policies and implement necessary security measures to protect sensitive information stored within the system.

Affected Version(s)

HPE Telco Network Function Virtual Orchestrator 7.0.0 <= 7.3.0

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.