Description
Ericsson RAN Compute and Site Controller 6610 contains a vulnerability in the Control System where Improper Input Validation can lead to arbitrary code execution, for example to obtain a Linux Shell with the same privileges as the attacker. The attacker would require elevated privileges for example a valid OAM user having the system administrator role to exploit the vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ericsson | Ericsson RAN Compute Basebands (all BB variants) | < 24.Q2 | 24.Q2 |
| Ericsson | Site Controller 6610 | < 24.Q2 | 24.Q2 |