{"timestamp":"2025-09-25T15:44:35.263809Z","id":"CVE-2025-40836","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"Ericsson","product":"Indoor Connect 8855","defaultStatus":"affected","versions":[{"version":"0","lessThan":"2025.Q2","versionType":"Indoor Connect 8855","status":"affected","changes":[{"at":"2025.Q2","status":"unaffected"}]}]}]

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AND
     OR
          *cpe:2.3:o:ericsson:indoor_connect_8855_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2025.q2
     OR
          cpe:2.3:h:ericsson:indoor_connect_8855:-:*:*:*:*:*:*:*

Ericsson: https://www.ericsson.com/en/about-us/security/psirt/e2025-09-25 Types: Vendor Advisory

Ericsson
Indoor Connect 8855 contains an improper input validation vulnerability which if exploited can lead to loss of integrity and confidentiality, as well
as unauthorized disclosure and modification of



of user
and configuration data. It may also be possible to execute commands with escalated privileges, impact
service availability, as well as modify system files and configuration
data.

Ericsson Indoor Connect 8855 contains an improper input validation vulnerability which if exploited can allow an attacker to execute commands with escalated privileges.

Ericsson
Indoor Connect 8855 contains an improper input validation vulnerability which if exploited can lead to loss of integrity and confidentiality, as well
as unauthorized disclosure and modification of



of user
and configuration data. It may also be possible to execute commands with escalated privileges, impact
service availability, as well as modify system files and configuration
data.

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CWE-20

https://www.ericsson.com/en/about-us/security/psirt/e2025-09-25