Ericsson vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2025-59172 Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain an Improper Neutralization of Special Elements vulnerability allowing an attacker to executHigh 8.5 · Jul 27, 2026
• CVE-2025-59174 Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability where an attacker sending a large volume of specially crafted messages may High 7.1 · Jun 5, 2026
• CVE-2026-25659 Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of Missing Values (CWE-230) vulnerability where an attacker continuously High 7.1 · Jun 5, 2026
• CVE-2026-25658 Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of Missing Values (CWE-230) vulnerability where an attacker continuously High 7.1 · Jun 5, 2026
• CVE-2026-25657 Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of Syntactically Invalid Structure (CWE-228) vulnerability where an attacHigh 7.1 · Jun 5, 2026
• CVE-2026-25660 CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.Critical 9.3 · Apr 24, 2026
• CVE-2025-40842 Ericsson Indoor Connect 8855 versions prior to 2025.Q3 contains a Cross-Site Scripting (XSS) vulnerability which, if exploited, can lead to unauthorized disclosHigh 8.5 · Mar 25, 2026
• CVE-2025-27260 Ericsson Indoor Connect 8855 versions prior to 2025.Q3 contains an Improper Filtering of Special Elements vulnerability which, if exploited, can lead to unauthoHigh 7.2 · Mar 25, 2026
• CVE-2025-0636 EMCLI contains a high severity vulnerability where improper neutralization of special elements used in an OS command could be exploited leading to Arbitrary CodHigh 8.4 · Oct 13, 2025
• CVE-2025-40837 Ericsson Indoor Connect 8855 contains a missing authorization vulnerability which if exploited can allow access to the system as a user with higher privileges tHigh 8.7 · Sep 25, 2025
• CVE-2025-40836 Ericsson Indoor Connect 8855 contains an improper input validation vulnerability which if exploited can allow an attacker to execute commands with escalated priHigh 8.7 · Sep 25, 2025
• CVE-2025-27262 Ericsson Indoor Connect 8855 contains a command injection vulnerability which if exploited can result in an escalation of privileges.High 8.5 · Sep 25, 2025
• CVE-2025-27261 Ericsson Indoor Connect 8855 contains an SQL injection vulnerability which if exploited can result in unauthorized disclosure or modification of data.High 8.7 · Sep 25, 2025
• CVE-2024-25010 Ericsson RAN Compute and Site Controller 6610 contains in certain configurations a high severity vulnerability where improper input validation could be exploiteHigh 8.8 · May 22, 2025
• CVE-2024-53827 Ericsson Packet Core Controller (PCC) contains a vulnerability where an attacker sending a large volume of specially crafted messages may cause service degradatHigh 7.5 · May 16, 2025
• CVE-2024-53829 CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.High 8.2 · Jan 21, 2025
• CVE-2024-10082 CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.High 8.7 · Nov 6, 2024
• CVE-2024-10081 CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.Critical 10 · Nov 6, 2024
• CVE-2024-25007 Ericsson Network Manager (ENM), versions prior to 23.1, contains a vulnerability in the export function of application log where Improper Neutralization of ForHigh 7.1 · Apr 4, 2024
• CVE-2023-39909 Ericsson Network Manager before 23.2 mishandles Access Control and thus unauthenticated low-privilege users can access the NCM application.High 8.8 · Dec 7, 2023
• CVE-2022-47531 An issue was discovered in Ericsson Evolved Packet Gateway (EPG) versions 3.x before 3.25 and 2.x before 2.16, allows authenticated users to bypass system CLI aHigh 8.8 · Dec 5, 2023
• CVE-2021-43339 In Ericsson Network Location before 2021-07-31, it is possible for an authenticated attacker to inject commands via file_name in the export functionality.High 8.8 · Nov 3, 2021
• CVE-2021-41390 In Ericsson ECM before 18.0, it was observed that Security Provider Endpoint in the User Profile Management Section is vulnerable to CSV Injection.High 8 · Sep 17, 2021
• CVE-2003-1442 The web administration page for the Ericsson HM220dp ADSL modem does not require authentication, which could allow remote attackers to gain access from the LAN High 7.5 · Dec 31, 2003