Ericsson Mobile Switching Center Server Path Traversal Vulnerability

Ericsson Mobile Switching Center Server is Ericsson's data center server. A security vulnerability exists in Ericsson Mobile Switching Center Server that stems from a directory traversal vulnerability. Affected Products and Versions: Ericsson Mobile Switching Center Server BC version 18A, IS 3.1...

CVE-2021-28485

CVE-2021-28485 affects Ericsson MSC-S (Mobile Switching Center Server) via the SIS web application. The issue is a relative path traversal in an authenticated context, triggered by a specific parameter in HTTPS requests, enabling access to system files not intended for web access. Documented affe...