Skip to content
OpenAdvisories
Medium · 5.1 CVE-2025-40838 EUVD-2025-31096GHSA-9mhv-xfmw-mcmq

Ericsson Indoor Connect 8855 - Insufficiently Protected Credentials Vulnerability

Published Sep 25, 2025 · Updated Sep 30, 2025 · Assigned by ERIC

Description

Ericsson Indoor Connect 8855 contains a vulnerability where server-side security can be bypassed in the client which if exploited can lead to unauthorized disclosure of certain information.

Affected products

VendorProductAffectedFixed
Ericsson Indoor Connect 8855 < 2025.Q2 2025.Q2

References