CVE-2025-40838: falha de média gravidade em Ericsson Indoor Connect 8855
Ericsson Indoor Connect 8855 - Insufficiently Protected Credentials Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.1epss 0.4%
Ericsson Indoor Connect 8855 contains a vulnerability where server-side security can be bypassed in the client which if exploited can lead to unauthorized disclosure of certain information.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N
Produtos afetados
Ericsson · Indoor Connect 8855CVEs relacionadas — Ericsson Indoor Connect 8855
No mesmo produto, das mais perigosas para as menos.
CVE-2025-27262HIGHEricsson Indoor Connect 8855 - Improper Neutralization of Special Elements used in an OS Command VulnerabilityEPSS 0.6%CVE-2025-40836HIGHEricsson Indoor Connect 8855 - Improper Input Validation VulnerabilityEPSS 0.4%CVE-2025-27261HIGHEricsson Indoor Connect 8855 - Improper Neutralization of Special Elements used in an SQL Command VulnerabilityEPSS 0.3%CVE-2025-40837HIGHEricsson Indoor Connect 8855 - Missing Authorization VulnerabilityEPSS 0.3%CVE-2025-27260HIGHEricsson Indoor Connect 8855 - Improper Filtering of Special Elements VulnerabilityEPSS 0.2%CVE-2025-40842HIGHEricsson Indoor Connect 8855 - Improper Neutralization of Input During Web Page Generation VulnerabilityEPSS 0.1%