CVE-2025-40837
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
Ericsson Indoor Connect 8855 contains a missing authorization vulnerability which if exploited can allow access to the system as a user with higher privileges than intended.
Risk Assessment
Risk of unauthorized access and privilege escalation, potentially leading to full device compromise.
Recommendation
Apply vendor security updates and restrict network access to the device.
Other vulnerabilities in Ericsson Indoor Connect 8855
See all- CVE-2025-40836Critical
Ericsson Indoor Connect 8855 contains an improper input validation vulnerability that, if exploited, can allow an attacker to execute commands with escalated privileges.
- CVE-2025-27261Critical
Ericsson Indoor Connect 8855 contains an SQL injection vulnerability that, if exploited, can result in unauthorized disclosure or modification of data.
- CVE-2025-27262High
Ericsson Indoor Connect 8855 contains a command injection vulnerability that, if exploited, can result in an escalation of privileges.
Original NVD description (English source)
Ericsson Indoor Connect 8855 contains a missing authorization vulnerability which if exploited can allow access to the system as a user with higher privileges than intended.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS