HPESBNW05058 rev.1 - HPE Telco Universal SLA Management, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Carriage Return Line Feed CRLF Injection; Remote: Denial of Service DoS, Carriage Return Line Feed CRLF Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Universal SLA Management =4.6 CVSS Scores: | CVE |...

HPESBNW05045 rev.1 - Telco Intelligent Assurance, Multiple Vulnerabilities

Potential Security Impact: Remote: Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Intelligent Assurance 4.2.14 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-52999 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |...

HPESBNW05051 rev.1 - HPE Telco Service Activator, Multiple Vulnerabilities

Potential Security Impact: Remote: Access Restriction Bypass, Denial of Service DoS, Unauthorized Access, Unauthorized Read Access to Data SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Service Activator 10.5.0 and below CVSS Scores: | CVE | CVSS Vector | Base Score | |...

HPESBNW05047 rev.1 - HPE Telco Service Orchestrator Software, Multiple Vulnerabilities

Potential Security Impact: Remote: Authentication Bypass, Compromise of System Integrity, Stack Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Service Orchestrator Prior to v5.6.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...

HPESBNW05033 rev.1 - HPE Telco Network Function Virtual Orchestrator, Improper Input Validation in the Undertow HTTP Server Core

Potential Security Impact: Local: Input Validation; Remote: Unauthorized Access, Input Validation SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Network Function Virtualization Orchestrator HPE Telco Network Function Virtualization Orchestrator v7.5.0 or below. CVSS...

HPESBNW05031 rev.1 - HPE Telco Service Orchestrator, Multiple Vulnerabilities

Potential Security Impact: Remote: Denial of Service DoS, Input Validation SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Service Orchestrator Prior to v5.5.1 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2026-2391 |...

HPESBNW05029 rev.1 - HPE Telco Service Orchestrator, Remote Buffer Overflow

Potential Security Impact: Remote: Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Service Orchestrator Prior to v4.2.12 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-52999 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |...

HPESBNW05022 rev.1 - HPE Telco Intelligent Assurance, Improper Control of Generation of Code vulnerability

Potential Security Impact: Local: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Intelligent Assurance 4.2.14 - FAS and PDO 4.2.14 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-33042 |...

HPESBNW04983 rev.1 - HPE Telco Service Orchestrator software, Prototype Pollution Vulnerability

Potential Security Impact: Remote: Unauthorized Data Access, Unauthorized Data Modification, unathorized modification SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Service Orchestrator Prior to v5.5.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | ...

HPESBNW05011 rev.1 - Telco Service Activator, Improper Input Validation

Potential Security Impact: Remote: Access Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Service Activator 10.5.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-12543 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L | 9.6...

HPESBNW04998 rev.1 - Prototype Pollution Vulnerability in HPE Telco Network Function Virtualization Orchestrator

Potential Security Impact: Remote: Denial of Service DoS, Elevation of Privilege, Unauthorized Access to Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Network Function Virtualization Orchestrator v7.5.0 or previous released versions CVSS Scores: |...

HPESBNW04997 rev.1 - HPE Telco Universal SLA Management, Multiple Vulnerabilities

Potential Security Impact: Local: Arbitrary File Modification; Remote: Code Execution, Disclosure of Sensitive Information, Escalation of Privilege, XML External Entity XXE, Insecure Deserialization SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Universal SLA Management...

HPESBNW04990 rev.1 - HPE Telco IP, Remote Stack Overflow.

Potential Security Impact: Remote: Stack Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco IP Mediation 8.5.1 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2024-7254 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 | RESOLUTION HPE...

HPESBNW04993 rev.1 - HPE Telco Service Orchestrator software, Buffer Overflow Vulnerability

Potential Security Impact: Remote: Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Service Orchestrator Prior to v4.2.12 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-68615 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |...

CVE-2022-35503

Improper verification of a user input in Open Source MANO v7-v12 allows an authenticated attacker to execute arbitrary code within the LCM module container via a Virtual Network Function VNF descriptor. An attacker may be able execute code to change the normal execution of the OSM components,...

HPESBNW04986 rev.1 - HPE Telco Service Activator, Multiple Vulnerabilities

Potential Security Impact: Remote: Authentication Bypass, Denial of Service DoS, Carriage Return Line Feed CRLF Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Service Activator =10.3.2 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...

Malicious code in telco (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 55c8199592663c3f388cba22988800084bbc3a5696279eb22c53e837c1d8ac40 Running the module starts a reverse shell --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-12-evil-rce...

EUVD-2025-201565

Malicious code in telco PyPI...

MAL-2025-192363 Malicious code in telco (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 55c8199592663c3f388cba22988800084bbc3a5696279eb22c53e837c1d8ac40 Running the module starts a reverse shell --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-12-evil-rce...

HPESBNW04972 Rev. 1 - HPE Telco Network Function Virtual Orchestrator, Multiple Vulnerabilities

Potential Security Impact: Remote: Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Network Function Virtualization Orchestrator HPE Telco Network Function Virtualization Orchestrator v7.4.0 or previous released versions CVSS Scores: | CVE | CVSS...