Missing Authorization Vulnerability in Ericsson Indoor Connect 8855

CVE-2025-40837

What is CVE-2025-40837?

The Indoor Connect 8855 from Ericsson is affected by a missing authorization vulnerability that may be exploited by malicious actors. If successfully exploited, this vulnerability could grant unauthorized users access to the system, allowing them to operate with elevated privileges beyond those intended. This significantly raises the risk of unauthorized actions within the affected system, making it crucial for users to apply necessary security measures and stay informed about potential exploits.

References