CVE-2025-40838

Ericsson Indoor Connect 8855 - Insufficiently Protected Credentials Vulnerability PUBLISHED

Description (CNA)

Ericsson Indoor Connect 8855 contains a vulnerability where server-side security can be bypassed in the client which if exploited can lead to unauthorized disclosure of certain information.

Affected (CNA)

Vendor / product	Versions
Ericsson / Indoor Connect 8855	affected 0 before 2025.Q2

CWE

CWE-522

References

https://www.ericsson.com/en/about-us/security/psirt/e2025-09-25

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.