High · 8.4 CVE-2025-0636 EUVD-2025-33965GHSA-w279-p4m3-85cc

Arbitrary Code Execution vulnerability in Ericsson RAN Compute and Site Controller

Published Oct 13, 2025 · Updated Oct 14, 2025 · Assigned by ERIC

Vendor: Ericsson Product: RAN Compute (all BB versions) Product: Site Controller 6610

Description

EMCLI contains a high severity vulnerability where improper neutralization of special elements used in an OS command could be exploited leading to Arbitrary Code Execution.

Affected products

Vendor	Product	Affected	Fixed
Ericsson	Site Controller 6610	< S24.Q2	S24.Q2
Ericsson	RAN Compute (all BB versions)	< 24.Q1.C5	24.Q1.C5

References

https://www.ericsson.com/en/about-us/security/psirt/cve-2025-0636