PT-2026-27765 · Ericsson · Ericsson Indoor Connect 8855

Telstra · Publicado 2026-03-25 · Atualizado 2026-03-25 · CVE-2025-40842

Positive Technologies (AI Summary)

CVSS v4.0

8.5

Alta

Vetor base

AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Ericsson Indoor Connect 8855 versions prior to 2025.Q3

Description The Ericsson Indoor Connect 8855 software contains a Cross-Site Scripting (XSS) issue. Successful exploitation of this issue could allow unauthorized disclosure and modification of information.

Recommendations Update Ericsson Indoor Connect 8855 to version 2025.Q3 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2025-40842

Produtos afetados

Ericsson Indoor Connect 8855

Referências · 3

• https://ericsson.com/en/about-us/security/psirt/security-bulletin-indoorconnect-march-2026 · Aviso do Fabricante
• https://ericsson.com/en/about-us/security/psirt/CVE-2025-40842 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-40842 · Nota de Segurança