CVE-2025-40836: Improper Input Validation

Ericsson Indoor Connect 8855 contains an improper input validation vulnerability which if exploited can allow an attacker to execute commands with escalated privileges...

CVE-2025-40838: Insufficiently Protected Credentials

Ericsson Indoor Connect 8855 contains a vulnerability where server-side security can be bypassed in the client which if exploited can lead to unauthorized disclosure of certain information...

PT-2025-39372

Name of the Vulnerable Software and Affected Versions Ericsson Indoor Connect 8855 affected versions not specified Description The software contains a SQL injection issue that could allow unauthorized disclosure and modification of user and configuration data. The issue involves a SQL injection...

Ericsson Indoor Connect 安全漏洞

Ericsson Indoor Connect is an indoor compact base station from Ericsson Sweden. A security vulnerability exists in Ericsson Indoor Connect version 8855, which stems from susceptibility to SQL injection attacks that could lead to unauthorized disclosure and modification of user and configuration...

PT-2025-39396

Name of the Vulnerable Software and Affected Versions Ericsson Indoor Connect 8855 affected versions not specified Description The software contains an improper input validation issue. Successful exploitation could result in a loss of data integrity and confidentiality, potentially leading to...

PT-2025-39402

Name of the Vulnerable Software and Affected Versions Ericsson Indoor Connect 8855 affected versions not specified Description The Ericsson Indoor Connect 8855 has a security issue where client-side server-side security checks can be bypassed. Successful exploitation of this issue could result in...

Ericsson Indoor Connect 安全漏洞

Ericsson Indoor Connect is an indoor compact base station from Ericsson Sweden. A security vulnerability exists in Ericsson Indoor Connect 8855, which stems from a lack of authorization and could lead to elevated privileges...

CVE-2024-25011

Ericsson Catalog Manager and Ericsson Order Care APIs do not have authentication enabled by default. Authentication checks can be configured to remediate the information disclosure issue...

CVE-2024-25011

Ericsson Catalog Manager and Ericsson Order Care APIs do not have authentication enabled by default. Authentication checks can be configured to remediate the information disclosure issue...

CVE-2024-25011

CVE-2024-25011 affects Ericsson Catalog Manager and Ericsson Order Care APIs. The vulnerability arises because authentication is not enabled by default, allowing potential information disclosure. Remediation guidance states that authentication checks can be configured to remediate the issue. No e...

CVE-2024-25011 Ericsson Catalog Manager and Ericsson Order Care - Exposure of Sensitive Information Vulnerability

Ericsson Catalog Manager and Ericsson Order Care APIs do not have authentication enabled by default. Authentication checks can be configured to remediate the information disclosure issue...

CVE-2024-25011 Ericsson Catalog Manager and Ericsson Order Care - Exposure of Sensitive Information Vulnerability

Ericsson Catalog Manager and Ericsson Order Care APIs do not have authentication enabled by default. Authentication checks can be configured to remediate the information disclosure issue...

CVE-2024-25011: Exposure of Sensitive Information to an Unauthorized Actor

Ericsson Catalog Manager and Ericsson Order Care APIs do not have authentication enabled by default. Authentication checks can be configured to remediate the information disclosure issue...

PT-2025-38311

Name of the Vulnerable Software and Affected Versions Ericsson Catalog Manager and Ericsson Order Care APIs affected versions not specified Description Ericsson Catalog Manager and Ericsson Order Care APIs do not have authentication enabled by default, leading to an information disclosure issue...

Ericsson Catalog Manager和Ericsson Order Care 安全漏洞

Ericsson Catalog Manager and Ericsson Order Care are both products of Ericsson, a Swedish company.Ericsson Catalog Manager is a service management platform.Ericsson Order Care is an order management system. A security vulnerability exists in Ericsson Catalog Manager and Ericsson Order Care that...

CVE-2024-25010

Ericsson RAN Compute and Site Controller 6610 contains in certain configurations a high severity vulnerability where improper input validation could be exploited leading to arbitrary code execution...

CVE-2024-25008

Ericsson RAN Compute and Site Controller 6610 contains a vulnerability in the Control System where Improper Input Validation can lead to arbitrary code execution, for example to obtain a Linux Shell with the same privileges as the attacker. The attacker would require elevated privileges for examp...

CVE-2024-25009

Ericsson Packet Core Controller PCC contains a vulnerability in Access and Mobility Management Function AMF where improper input validation can lead to denial of service which may result in service degradation...

CVE-2023-39909

Ericsson Network Manager before 23.2 mishandles Access Control and thus unauthenticated low-privilege users can access the NCM application...

CVE-2022-46407

Ericsson Network Manager ENM, versions prior to 22.2, contains a vulnerability in the REST endpoint “editprofile” where Open Redirect HTTP Header Injection can lead to redirection of the submitted request to domain out of control of ENM deployment. The attacker would need admin/elevated access to...