CVE-2025-37111— Hard-Coded Authentication Keys found in System
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-37111
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Hard-Coded Authentication Keys found in System
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability was discovered in the storage policy for certain sets of authentication keys in the HPE Telco Network Function Virtual Orchestrator. Successful Exploitation could lead to unauthorized parties gaining access to sensitive system information.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
使用硬编码的凭证
Source: NVD (National Vulnerability Database)
Vulnerability Title
HPE Telco Network Function Virtual Orchestrator 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
HPE Telco Network Function Virtual Orchestrator是美国HPE公司的一款用于电信网络功能虚拟化的编排和管理软件。 HPE Telco Network Function Virtual Orchestrator存在安全漏洞，该漏洞源于认证密钥存储策略不当，可能导致未授权访问系统信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Hewlett Packard Enterprise | HPE Telco Network Function Virtual Orchestrator | 7.0.0 ~ 7.3.0 | - |
II. Public POCs for CVE-2025-37111
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-37111
请登录查看更多情报信息。
Same Patch Batch · Hewlett Packard Enterprise · 2025-07-31 · 3 CVEs total
| CVE-2025-37112 | 6.0 MEDIUM | Hard-Coded Encryption Keys found in System |
| CVE-2025-37110 | 6.0 MEDIUM | Sensitive Credential Information stored insecurely in System Database |
IV. Related Vulnerabilities
Same vendor: Hewlett Packard Enterprise
Same weakness: CWE-798
- CVE-2026-7414
Hardcoded credentials in Yarbo robot firmware - CVE-2026-8032
PicoTronica e-Clinic Healthcare System ECHS echs.js hard-cod - CVE-2026-32834
Easy PayPal Events & Tickets 1.3 Authentication Bypass via Q - CVE-2026-42376
D-Link DIR-456U A1 Hardcoded Telnet Backdoor Credentials - CVE-2026-42375
D-Link DIR-600L A1 Hardcoded Telnet Backdoor Credentials
V. Comments for CVE-2025-37111
No comments yet