PT-2025-41761 · Ericsson · Ericsson Network Manager

Published 2025-10-13 · Updated 2025-10-21 · CVE-2025-27258

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ericsson Network Manager versions prior to 25.1 GA

Description Ericsson Network Manager (ENM) versions prior to 25.1 GA contain an issue that, if exploited, could lead to an escalation of privilege.

Recommendations Update to version 25.1 GA or later.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-27258

Affected Products

Ericsson Network Manager

References · 6

• https://ericsson.com/en/about-us/security/psirt/security-bulletin-enm-october-2025 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-27258 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-27258 · Security Note
• https://t.me/cveNotify/139659 · Telegram Post
• https://t.me/CVEtracker/34752 · Telegram Post
• https://t.me/cveNotify/138424 · Telegram Post