CVE-2025-27262
HighCVSS 7.8Exploitation Probability (EPSS)
Elevated risk53th percentile - higher than 53% of all known CVEs
Summary
Ericsson Indoor Connect 8855 contains a command injection vulnerability that, if exploited, can result in an escalation of privileges.
Risk Assessment
An attacker can gain elevated privileges, potentially leading to full control of the device and network compromise.
Recommendation
Apply updates provided by the vendor or restrict access to the device.
Other vulnerabilities in Ericsson Indoor Connect 8855
See all- CVE-2025-40836Critical
Ericsson Indoor Connect 8855 contains an improper input validation vulnerability that, if exploited, can allow an attacker to execute commands with escalated privileges.
- CVE-2025-27261Critical
Ericsson Indoor Connect 8855 contains an SQL injection vulnerability that, if exploited, can result in unauthorized disclosure or modification of data.
- CVE-2025-40837High
Ericsson Indoor Connect 8855 contains a missing authorization vulnerability which if exploited can allow access to the system as a user with higher privileges than intended.
Original NVD description (English source)
Ericsson Indoor Connect 8855 contains a command injection vulnerability which if exploited can result in an escalation of privileges.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS