The vulnerability of the web portal for managing the Ericsson-LG iPECS NMS allows a hacker to bypass authentication procedures and execute arbitrary code.

The vulnerability of the Ericsson-LG iPECS NMS network management portal is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to bypass authentication procedures and execute arbitrary code using parameters “id” and...