Command Injection Vulnerability in Ericsson Indoor Connect 8855

CVE-2025-27262

What is CVE-2025-27262?

The Indoor Connect 8855 by Ericsson is vulnerable to a command injection flaw that can potentially compromise both integrity and confidentiality of the systems. Successful exploitation may enable attackers to execute unauthorized commands, gain escalated privileges, and alter system configuration or user data. Moreover, this vulnerability poses a risk to service availability, potentially disrupting operations and leading to unauthorized modifications, which could severely impact the data security architecture.

References