Skip to content
OpenAdvisories
High · 8.7 CVE-2025-40837 EUVD-2025-31097GHSA-x5h9-c773-h286

Ericsson Indoor Connect 8855 - Missing Authorization Vulnerability

Published Sep 25, 2025 · Updated Sep 30, 2025 · Assigned by ERIC

Description

Ericsson Indoor Connect 8855 contains a missing authorization vulnerability which if exploited can allow access to the system as a user with higher privileges than intended.

Affected products

VendorProductAffectedFixed
Ericsson Indoor Connect 8855 < 2025.Q2 2025.Q2

References