PT-2025-38311 · Ericsson · Ericsson Order Care Apis+1

Published 2025-09-18 · Updated 2025-09-19 · CVE-2024-25011

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Ericsson Catalog Manager and Ericsson Order Care APIs (affected versions not specified)

Description Ericsson Catalog Manager and Ericsson Order Care APIs do not have authentication enabled by default, leading to an information disclosure issue. Authentication checks can be configured to remediate the issue.

Recommendations Configure authentication checks for the Ericsson Catalog Manager and Ericsson Order Care APIs.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2024-25011

Affected Products

Ericsson Catalog Manager

Ericsson Order Care Apis

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-25011 · Security Note
• https://t.me/CVEtracker/32836 · Telegram Post
• https://ericsson.com/en/about-us/security/psirt/cve-2024-25011 · Note
• https://twitter.com/VulmonFeeds/status/1968669774537183407 · Twitter Post
• https://t.me/cveNotify/135780 · Telegram Post
• https://twitter.com/CVEnew/status/1968923637781602479 · Twitter Post