high8.8
CVE-2025-40837
Ericsson Indoor Connect 8855 contains a missing authorization vulnerability which if exploited can allow access to the system as a user with higher privileges …
Impact
Ericsson Indoor Connect 8855 contains a missing authorization vulnerability which if exploited can allow access to the system as a user with higher privileges than intended.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ericsson | Indoor Connect 8855 Firmware | before 2025.q2 |