CVE-2025-40836: Ericsson Indoor Connect 8855 - Improper Input Validation Vulnerability
Published Sep 25, 2025
·Updated
Ericsson Indoor Connect 8855 contains an improper input validation vulnerability which if exploited can allow an attacker to execute commands with escalated privileges.
Affected Software
3 affected components
Ericsson Indoor Connect 8855
All of the following
Ericsson Indoor Connect 8855 Firmware<2025.q2
Ericsson Indoor Connect 8855
Event History
Sep 25, 2025
CVE Published
via MITRE·02:49 PM
Data Sourced
via MITRE·02:49 PM
DescriptionWeakness
Data Sourced
via NVD·03:16 PM
DescriptionSeverityWeaknessAffected Software
Jan 22, 57724
Event
via NVD·06:59 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-40836?
CVE-2025-40836 is classified as a high-severity vulnerability due to potential loss of integrity and confidentiality.
2
What impact does CVE-2025-40836 have on affected systems?
CVE-2025-40836 can lead to unauthorized disclosure and modification of user and configuration data.
3
How can I mitigate CVE-2025-40836?
Mitigation of CVE-2025-40836 involves applying the latest security updates and patches provided by Ericsson.
4
Who is affected by CVE-2025-40836?
CVE-2025-40836 affects users of the Ericsson Indoor Connect 8855.
5
Can CVE-2025-40836 allow remote command execution?
Yes, CVE-2025-40836 may allow an attacker to execute commands on the affected system.