EUVD-2021-15162

Malware in sbrugna...

CVE-2021-28485

In Ericsson Mobile Switching Center Server MSC-S before IS 3.1 CP22, the SIS web application allows relative path traversal via a specific parameter in the https request after authentication, which allows access to files on the system that are not intended to be accessible via the web application...

CVE-2021-28485

In Ericsson Mobile Switching Center Server MSC-S before IS 3.1 CP22, the SIS web application allows relative path traversal via a specific parameter in the https request after authentication, which allows access to files on the system that are not intended to be accessible via the web application...

CVE-2021-28485

In Ericsson Mobile Switching Center Server MSC-S before IS 3.1 CP22, the SIS web application allows relative path traversal via a specific parameter in the https request after authentication, which allows access to files on the system that are not intended to be accessible via the web application...

PT-2023-12128 · Ericsson · Ericsson Mobile Switching Center Server

Name of the Vulnerable Software and Affected Versions: Ericsson Mobile Switching Center Server MSC-S versions BC 18A and IS 3.1 through IS 3.1 CP21 Description: The issue allows relative path traversal via a specific parameter in the https request after authentication, which enables access to fil...

CVE-2021-28485: Improper Limitation of a Pathname to a Restricted Directory

In Ericsson Mobile Switching Center Server MSC-S before IS 3.1 CP22, the SIS web application allows relative path traversal via a specific parameter in the https request after authentication, which allows access to files on the system that are not intended to be accessible via the web application...

CVE-2021-28485

In Ericsson Mobile Switching Center Server MSC-S before IS 3.1 CP22, the SIS web application allows relative path traversal via a specific parameter in the https request after authentication, which allows access to files on the system that are not intended to be accessible via the web application...

Ericsson Mobile Switching Center Server Path Traversal Vulnerability

Ericsson Mobile Switching Center Server is Ericsson's data center server. A security vulnerability exists in Ericsson Mobile Switching Center Server that stems from a directory traversal vulnerability. Affected Products and Versions: Ericsson Mobile Switching Center Server BC version 18A, IS 3.1...

Cellular Privacy, SS7 Security Shattered at 31C3

The recently concluded Chaos Communications Congress 31c3 in Hamburg, Germany was an all-out assault on cellular call privacy and security. Of particular interest was the SS7 protocol used to route calls between switching centers. Researchers, doing parallel research as it turns out, found gaping...