CVE-2025-40837

Ericsson Indoor Connect 8855 is affected by a missing authorization vulnerability that could allow access to the system as a user with higher privileges. The CVE shows CVSSv3.1 base score 8.8 (Network, Low likelihood/No user interaction, Privileges Required: Low, Scope: Unchanged; Confidentiality...

CVE-2025-40836 Ericsson Indoor Connect 8855 - Improper Input Validation Vulnerability

Ericsson Indoor Connect 8855 contains an improper input validation vulnerability which if exploited can allow an attacker to execute commands with escalated privileges...

CVE-2025-40836 Ericsson Indoor Connect 8855 - Improper Input Validation Vulnerability

Ericsson Indoor Connect 8855 contains an improper input validation vulnerability which if exploited can allow an attacker to execute commands with escalated privileges...

CVE-2025-40836

Summary: CVE-2025-40836 affects Ericsson Indoor Connect 8855 with an improper input validation vulnerability that could allow an attacker to execute commands with escalated privileges. Multiple sources (NVD, Red Hat, CVE lists, industry feeds) confirm the vulnerability title and potential impact....

CVE-2025-27262

CVE-2025-27262 summary (normal mode) : Ericsson Indoor Connect 8855 is affected by a command injection vulnerability in its handling of OS commands, enabling an attacker with local access to achieve privilege escalation. The CVSS basis metrics indicate a high-severity, local, low-exploitability-c...

CVE-2025-27262 Ericsson Indoor Connect 8855 - Improper Neutralization of Special Elements used in an OS Command Vulnerability

Ericsson Indoor Connect 8855 contains a command injection vulnerability which if exploited can result in an escalation of privileges...

CVE-2025-27261 Ericsson Indoor Connect 8855 - Improper Neutralization of Special Elements used in an SQL Command Vulnerability

Ericsson Indoor Connect 8855 contains an SQL injection vulnerability which if exploited can result in unauthorized disclosure or modification of data...

CVE-2025-27261

CVE-2025-27261 affects Ericsson Indoor Connect 8855 with an SQL injection vulnerability in the product (Improper Neutralization of Special Elements used in an SQL Command). The databases and configuration data could be exposed or modified if exploited. Root cause and affected component are descri...

CVE-2025-27261 Ericsson Indoor Connect 8855 - Improper Neutralization of Special Elements used in an SQL Command Vulnerability

Ericsson Indoor Connect 8855 contains an SQL injection vulnerability which if exploited can result in unauthorized disclosure or modification of data...

Ericsson Indoor Connect 安全漏洞

Ericsson Indoor Connect is an indoor compact base station from Ericsson Sweden. A security vulnerability exists in Ericsson Indoor Connect version 8855, which stems from a command injection vulnerability that could lead to integrity compromise and confidentiality disclosure, as well as unauthoriz...

PT-2025-39394

Name of the Vulnerable Software and Affected Versions Ericsson Indoor Connect 8855 affected versions not specified Description The software contains a command injection issue that, if exploited, could result in a loss of data integrity and confidentiality. This could lead to the unauthorized...

Ericsson Indoor Connect 安全漏洞

Ericsson Indoor Connect is an indoor compact base station from Ericsson Sweden. A security vulnerability exists in Ericsson Indoor Connect version 8855, which arises from improper input validation and could result in loss of integrity and confidentiality, unauthorized disclosure and modification ...

PT-2025-39401

Name of the Vulnerable Software and Affected Versions Ericsson Indoor Connect 8855 affected versions not specified Description The software contains a missing authorization check. Successful exploitation could allow an attacker to gain access to the system with elevated privileges. Recommendation...

Ericsson Indoor Connect 安全漏洞

Ericsson Indoor Connect is an indoor compact base station from Ericsson Sweden. A security vulnerability exists in Ericsson Indoor Connect version 8855, which originates from a client-side ability to bypass server-side security measures, potentially leading to unauthorized disclosure of user...

PT-2025-39372

Name of the Vulnerable Software and Affected Versions Ericsson Indoor Connect 8855 affected versions not specified Description The software contains a SQL injection issue that could allow unauthorized disclosure and modification of user and configuration data. The issue involves a SQL injection...

Ericsson Indoor Connect 安全漏洞

Ericsson Indoor Connect is an indoor compact base station from Ericsson Sweden. A security vulnerability exists in Ericsson Indoor Connect version 8855, which stems from susceptibility to SQL injection attacks that could lead to unauthorized disclosure and modification of user and configuration...

PT-2025-39396

Name of the Vulnerable Software and Affected Versions Ericsson Indoor Connect 8855 affected versions not specified Description The software contains an improper input validation issue. Successful exploitation could result in a loss of data integrity and confidentiality, potentially leading to...

PT-2025-39402

Name of the Vulnerable Software and Affected Versions Ericsson Indoor Connect 8855 affected versions not specified Description The Ericsson Indoor Connect 8855 has a security issue where client-side server-side security checks can be bypassed. Successful exploitation of this issue could result in...

Ericsson Indoor Connect 安全漏洞

Ericsson Indoor Connect is an indoor compact base station from Ericsson Sweden. A security vulnerability exists in Ericsson Indoor Connect 8855, which stems from a lack of authorization and could lead to elevated privileges...

CVE-2024-25011

Ericsson Catalog Manager and Ericsson Order Care APIs do not have authentication enabled by default. Authentication checks can be configured to remediate the information disclosure issue...