Ericsson Indoor Connect 8855 – Improper Input Validation Vulnerability

8.7 / 10

HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Description

Ericsson
Indoor Connect 8855 contains an improper input validation vulnerability which if exploited can lead to loss of integrity and confidentiality, as well
as unauthorized disclosure and modification of

of user
and configuration data. It may also be possible to execute commands with escalated privileges, impact
service availability, as well as modify system files and configuration
data.

Basic Information

ID CVE-2025-40836

Source ERIC

Published Sep 25, 2025 at 14:49

Affected Product

Vendor Ericsson

Product Indoor Connect 8855

Affected Versions Ericsson Indoor Connect 8855 0

CWE Classification

CWE-20

References

www.ericsson.com /en/about-us/security/psirt/e2025-09-25

{
    "lastseen": "",
    "description": "Ericsson\nIndoor Connect 8855 contains an improper input validation vulnerability which if exploited can lead to loss of integrity and confidentiality, as well\nas unauthorized disclosure and modification of\n\n\n\nof user\nand configuration data. It may also be possible to execute commands with escalated privileges, impact\nservice availability, as well as modify system files and configuration\ndata.",
    "published": "2025-09-25T14:49:02.613Z",
    "modified": "2025-09-25T14:49:02.613Z",
    "type": "cve",
    "title": "Ericsson Indoor Connect 8855 - Improper Input Validation Vulnerability",
    "source": "ERIC",
    "references": "https://www.ericsson.com/en/about-us/security/psirt/e2025-09-25",
    "id": "CVE-2025-40836",
    "bulletinFamily": "",
    "cwe": [
        "CWE-20"
    ],
    "cvelist": null,
    "sourceData": "Ericsson Indoor Connect 8855 0",
    "sourceHref": "",
    "cvss": {
        "score": 8.7,
        "severity": "HIGH",
        "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Indoor Connect 8855",
    "version": "0",
    "vendor": "Ericsson",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}

Ericsson Indoor Connect 8855 – Improper Input Validation Vulnerability_CVE-2025-40836