Input Validation Flaw in Ericsson Indoor Connect 8855

CVE-2025-40836

What is CVE-2025-40836?

The Ericsson Indoor Connect 8855 is affected by an improper input validation vulnerability that could allow attackers to disrupt the integrity and confidentiality of sensitive user and configuration data. Exploitation of this flaw may lead to unauthorized access, modification of system files, and alteration of configuration settings. Moreover, an attacker could potentially execute commands with elevated privileges, adversely impacting service availability.

References