Ericsson Indoor Connect 8855 contains an improper input validation vulnerability which if exploited can allow an attacker to execute commands with escalated privileges.

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Vendors Products
Ericsson
  • Indoor Connect 8855
  • Indoor Connect 8855 Firmware

Configuration 1 [-]

AND
cpe:2.3:o:ericsson:indoor_connect_8855_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ericsson:indoor_connect_8855:-:*:*:*:*:*:*:*

No data.

References
Link Providers
https://www.ericsson.com/en/about-us/security/psirt/e2025-09-25 cve-icon cve-icon
History

Thu, 02 Oct 2025 18:00:00 +0000

Type Values Removed Values Added
First Time appeared Ericsson indoor Connect 8855 Firmware
CPEs cpe:2.3:h:ericsson:indoor_connect_8855:-:*:*:*:*:*:*:*
cpe:2.3:o:ericsson:indoor_connect_8855_firmware:*:*:*:*:*:*:*:*
Vendors & Products Ericsson indoor Connect 8855 Firmware
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

Tue, 30 Sep 2025 12:30:00 +0000

Type Values Removed Values Added
Description Ericsson Indoor Connect 8855 contains an improper input validation vulnerability which if exploited can lead to loss of integrity and confidentiality, as well as unauthorized disclosure and modification of of user and configuration data. It may also be possible to execute commands with escalated privileges, impact service availability, as well as modify system files and configuration data. Ericsson Indoor Connect 8855 contains an improper input validation vulnerability which if exploited can allow an attacker to execute commands with escalated privileges.

Fri, 26 Sep 2025 11:45:00 +0000

Type Values Removed Values Added
First Time appeared Ericsson
Ericsson indoor Connect 8855
Vendors & Products Ericsson
Ericsson indoor Connect 8855

Thu, 25 Sep 2025 16:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Thu, 25 Sep 2025 15:00:00 +0000

Type Values Removed Values Added
Description Ericsson Indoor Connect 8855 contains an improper input validation vulnerability which if exploited can lead to loss of integrity and confidentiality, as well as unauthorized disclosure and modification of of user and configuration data. It may also be possible to execute commands with escalated privileges, impact service availability, as well as modify system files and configuration data.
Title Ericsson Indoor Connect 8855 - Improper Input Validation Vulnerability
Weaknesses CWE-20
References
Metrics cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}
cve-icon MITRE

Status: PUBLISHED

Assigner: ERIC

Published: 2025-09-25T14:49:02.613Z

Updated: 2025-09-30T12:14:36.904Z

Reserved: 2025-04-16T08:59:01.744Z

Link: CVE-2025-40836

cve-icon Vulnrichment

Updated: 2025-09-25T15:44:37.067Z

cve-icon NVD

Status : Analyzed

Published: 2025-09-25T15:16:11.233

Modified: 2025-10-02T17:59:39.937

Link: CVE-2025-40836

cve-icon Redhat

No data.