CVE-2025-0636 — Arbitrary Code Execution vulnerability in Ericsson RAN Compute and Site Controller

CVE-2025-0636

Arbitrary Code Execution vulnerability in Ericsson RAN Compute and Site Controller PUBLISHED

Description (CNA)

EMCLI contains a high severity vulnerability where improper neutralization of special elements used in an OS command could be exploited leading to Arbitrary Code Execution.

Affected (CNA)

Vendor / product	Versions
Ericsson / Site Controller 6610	affected 0 before S24.Q2
Ericsson / RAN Compute (all BB versions)	affected 0 before 24.Q1.C5

CWE

CWE-78

References

https://www.ericsson.com/en/about-us/security/psirt/cve-2025-0636

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.