CVE-2025-40836
BaseFortify
Publication date: 2025-09-25
Last updated on: 2025-10-02
Assigner: Ericsson
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| ericsson | indoor_connect_8855_firmware | to 2025.q2 (exc) |
| ericsson | indoor_connect_8855 | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-20 | The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in Ericsson Indoor Connect 8855 is due to improper input validation. If exploited, it can lead to loss of integrity and confidentiality, unauthorized disclosure and modification of user and configuration data, possible execution of commands with escalated privileges, impact on service availability, and modification of system files and configuration data.
How can this vulnerability impact me? :
The vulnerability can impact you by allowing attackers to compromise the integrity and confidentiality of your data, disclose and modify user and configuration information without authorization, execute commands with higher privileges, disrupt service availability, and alter system files and configurations, potentially leading to significant operational and security risks.