VULNERABILITY INTELLIGENCE

CVE-2025-40836

CVSS score8.7 HIGH
EPSS probability0.43%
CISA KEVNot currently listed
Published2025-09-25
Last modified2026-10-11
CVSS vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Description

Ericsson Indoor Connect 8855 contains an improper input validation vulnerability which if exploited can allow an attacker to execute commands with escalated privileges.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references