Skip to content
OpenAdvisories
Medium · 6.8 CVE-2024-25008 EUVD-2024-22370GHSA-qf26-f55x-v3rc

Ericsson RAN Compute and Site Controller 6610 - Improper Input Validation Vulnerability

Published Aug 16, 2024 · Updated Aug 16, 2024 · Assigned by ERIC

Description

Ericsson RAN Compute and Site Controller 6610 contains a vulnerability in the Control System where Improper Input Validation can lead to arbitrary code execution, for example to obtain a Linux Shell with the same privileges as the attacker. The attacker would require elevated privileges for example a valid OAM user having the system administrator role to exploit the vulnerability.

Affected products

VendorProductAffectedFixed
Ericsson Ericsson RAN Compute Basebands (all BB variants) < 24.Q2 24.Q2
Ericsson Site Controller 6610 < 24.Q2 24.Q2

References