CVE-2024-25008 — Ericsson RAN Compute and Site Controller 6610 - Improper Input Validation Vulnerability

CVE-2024-25008

Ericsson RAN Compute and Site Controller 6610 - Improper Input Validation Vulnerability PUBLISHED

Description (CNA)

Ericsson RAN Compute and Site Controller 6610 contains a vulnerability in the Control System where Improper Input Validation can lead to arbitrary code execution, for example to obtain a Linux Shell with the same privileges as the attacker. The attacker would require elevated privileges for example a valid OAM user having the system administrator role to exploit the vulnerability.

Affected (CNA)

Vendor / product	Versions
Ericsson / Ericsson RAN Compute Basebands (all BB variants)	affected 0 before 24.Q2
Ericsson / Site Controller 6610	affected 0 before 24.Q2

CWE

CWE-20

References

https://www.ericsson.com/en/about-us/security/psirt/security-bulletin-ericsson-ran-compute-august-2024

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.