CVE-2025-40837

Ericsson Indoor Connect 8855 - Missing Authorization Vulnerability PUBLISHED

Description (CNA)

Ericsson Indoor Connect 8855 contains a missing authorization vulnerability which if exploited can allow access to the system as a user with higher privileges than intended.

Affected (CNA)

Vendor / product	Versions
Ericsson / Indoor Connect 8855	affected 0 before 2025.Q2

CWE

CWE-862

References

https://www.ericsson.com/en/about-us/security/psirt/e2025-09-25

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.