CVE-2024-25008
Ericsson RAN Compute and Site Controller 6610 contains a vulnerability in the Control System where Improper Input Validation can lead to arbitrary code execution, for example to obtain a Linux Shell with the same privileges as the attacker. The attacker would require elevated privileges for example a valid OAM user having the system administrator role to exploit the vulnerability.
- Score
- CVSS 3.1 6.8 Medium
- Status
- Deferred - 85b1779b-6ecd-4f52-bcc5-73eac4659dcf
- Published
- 2024-08-16
- Last modified
- 2024-08-16
- Weaknesses
- CWE-20
Affected products
- Controller 6610 (Ericsson)
- Ericsson Ran Compute Basebands All Bb Variants (Ericsson)
- Ran Compute (Ericsson)
- Site Controller 6610 (Ericsson)
References
- https://www.ericsson.com/en/about-us/security/psirt/security-bulletin-ericsson-ran-compute-august-2024
