Ref# ADV2025_248 | Date: Aug 5th 2025

---

HPE has published a security advisory highlighting vulnerabilities in the following products on August 1st, 2025. It is recommended that you take the necessary precautions by ensuring your products are always updated. 

• HPE Private Cloud AI – versions prior to v1.5 
• HPE Telco IP Mediation – versions prior to 8.5.1-0B 
• HPE Telco Service Orchestrator – versions prior to v5.3.4 

For more information on these updates, you can follow these URLs: 

• HPESBGN04904 rev.1 – HPE Private Cloud AI, Multiple Vulnerabilities 

• HPESBNW04906 rev.1 – HPE Telco IP Mediation, Multiple Vulnerabilities 

• HPESBNW04907 rev.1 – HPE Telco Service Orchestrator Software, Remote Command Execution Vulnerability 

• HPE Security Bulletin Library 

The Guyana National CIRT recommends that users and administrators review these updates and apply them where necessary. 

PDF Download: HPE Security Advisory

References 

• HPE Security Bulletin Library. (August 1st, 2025). Retrieved from HPE. https://support.hpe.com/connect/s/securitybulletinlibrary?language=en_US  

• HPE Security Advisory. (August 5th, 2025). Retrieved from Canadian Centre for Cyber Security. https://www.cyber.gc.ca/en/alerts-advisories/hpe-security-advisory-av25-477