82 matches found
CVE-2025-40838
CVE-2025-40838 affects Ericsson Indoor Connect 8855. The vulnerability arises from a client-side bypass of server-side security, potentially allowing unauthorized disclosure of information. CVSSv3.1 metrics indicate Network access, Low attack complexity, Privileges None, UI None, with Confidentia...
CVE-2025-40838 Ericsson Indoor Connect 8855 - Insufficiently Protected Credentials Vulnerability
Ericsson Indoor Connect 8855 contains a vulnerability where server-side security can be bypassed in the client which if exploited can lead to unauthorized disclosure of certain information...
CVE-2025-40837 Ericsson Indoor Connect 8855 - Missing Authorization Vulnerability
Ericsson Indoor Connect 8855 contains a missing authorization vulnerability which if exploited can allow access to the system as a user with higher privileges than intended...
CVE-2025-40837
Ericsson Indoor Connect 8855 is affected by a missing authorization vulnerability that could allow access to the system as a user with higher privileges. The CVE shows CVSSv3.1 base score 8.8 (Network, Low likelihood/No user interaction, Privileges Required: Low, Scope: Unchanged; Confidentiality...
CVE-2025-40836 Ericsson Indoor Connect 8855 - Improper Input Validation Vulnerability
Ericsson Indoor Connect 8855 contains an improper input validation vulnerability which if exploited can allow an attacker to execute commands with escalated privileges...
CVE-2025-40836
Summary: CVE-2025-40836 affects Ericsson Indoor Connect 8855 with an improper input validation vulnerability that could allow an attacker to execute commands with escalated privileges. Multiple sources (NVD, Red Hat, CVE lists, industry feeds) confirm the vulnerability title and potential impact....
CVE-2025-27262 Ericsson Indoor Connect 8855 - Improper Neutralization of Special Elements used in an OS Command Vulnerability
Ericsson Indoor Connect 8855 contains a command injection vulnerability which if exploited can result in an escalation of privileges...
CVE-2025-27262
CVE-2025-27262 summary (normal mode) : Ericsson Indoor Connect 8855 is affected by a command injection vulnerability in its handling of OS commands, enabling an attacker with local access to achieve privilege escalation. The CVSS basis metrics indicate a high-severity, local, low-exploitability-c...
CVE-2025-27261
Ericsson Indoor Connect 8855 contains an SQL injection vulnerability which if exploited can result in unauthorized disclosure or modification of data...
CVE-2025-27261
Ericsson Indoor Connect 8855 contains an SQL injection vulnerability which if exploited can result in unauthorized disclosure or modification of data...
CVE-2025-27261 Ericsson Indoor Connect 8855 - Improper Neutralization of Special Elements used in an SQL Command Vulnerability
Ericsson Indoor Connect 8855 contains an SQL injection vulnerability which if exploited can result in unauthorized disclosure or modification of data...
CVE-2025-27261
CVE-2025-27261 affects Ericsson Indoor Connect 8855 with an SQL injection vulnerability in the product (Improper Neutralization of Special Elements used in an SQL Command). The databases and configuration data could be exposed or modified if exploited. Root cause and affected component are descri...
CVE-2025-27261 Ericsson Indoor Connect 8855 - Improper Neutralization of Special Elements used in an SQL Command Vulnerability
Ericsson Indoor Connect 8855 contains an SQL injection vulnerability which if exploited can result in unauthorized disclosure or modification of data...
Ericsson Indoor Connect 安全漏洞
Ericsson Indoor Connect is an indoor compact base station from Ericsson Sweden. A security vulnerability exists in Ericsson Indoor Connect version 8855, which arises from improper input validation and could result in loss of integrity and confidentiality, unauthorized disclosure and modification ...
Ericsson Indoor Connect 安全漏洞
Ericsson Indoor Connect is an indoor compact base station from Ericsson Sweden. A security vulnerability exists in Ericsson Indoor Connect version 8855, which originates from a client-side ability to bypass server-side security measures, potentially leading to unauthorized disclosure of user...
Ericsson Indoor Connect 安全漏洞
Ericsson Indoor Connect is an indoor compact base station from Ericsson Sweden. A security vulnerability exists in Ericsson Indoor Connect version 8855, which stems from susceptibility to SQL injection attacks that could lead to unauthorized disclosure and modification of user and configuration...
Ericsson Indoor Connect 安全漏洞
Ericsson Indoor Connect is an indoor compact base station from Ericsson Sweden. A security vulnerability exists in Ericsson Indoor Connect 8855, which stems from a lack of authorization and could lead to elevated privileges...
PT-2025-39402
Name of the Vulnerable Software and Affected Versions Ericsson Indoor Connect 8855 affected versions not specified Description The Ericsson Indoor Connect 8855 has a security issue where client-side server-side security checks can be bypassed. Successful exploitation of this issue could result in...
