CVE-2025-37111: Hard-Coded Authentication Keys found in System
A vulnerability was discovered in the storage policy for certain sets of authentication keys in the HPE Telco Network Function Virtual Orchestrator. Successful Exploitation could lead to unauthorized parties gaining access to sensitive system information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-37111?
CVE-2025-37111 is classified as a critical vulnerability due to the potential for unauthorized access to sensitive system information.
How do I fix CVE-2025-37111?
To fix CVE-2025-37111, ensure you apply the latest security patches provided by Hewlett Packard Enterprise for the Telco Network Function Virtual Orchestrator.
What software versions are affected by CVE-2025-37111?
CVE-2025-37111 affects certain sets of authentication keys in specific configurations of the HPE Telco Network Function Virtual Orchestrator.
What are the potential consequences of exploiting CVE-2025-37111?
Exploiting CVE-2025-37111 could allow unauthorized parties to gain access to sensitive system information, potentially leading to further security breaches.
Is there a workaround for CVE-2025-37111?
Currently, there are no recommended workarounds for CVE-2025-37111 aside from applying the necessary patches as soon as they become available.