CVE-2025-27261

Ericsson Indoor Connect 8855 - Improper Neutralization of Special Elements used in an SQL Command Vulnerability PUBLISHED

Description (CNA)

Ericsson Indoor Connect 8855 contains an SQL injection vulnerability which if exploited can result in unauthorized disclosure or modification of data.

Affected (CNA)

Vendor / product	Versions
Ericsson / Indoor Connect 8855	affected 0 before 2025.Q2

CWE

CWE-89

References

https://www.ericsson.com/en/about-us/security/psirt/e2025-09-25

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.