Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.1
CVE-2025-40838: Ericsson Indoor Connect 8855: Unauthorized Data Disclosure
CVE-2025-40838 · published 1 year ago
Summary
The Ericsson Indoor Connect 8855 system's security can be bypassed, potentially allowing unauthorized access to sensitive information. This means that attackers may be able to see data they shouldn't have access to. To protect your data, ensure you have the latest software updates installed and follow recommended security best practices.
What to do
- Update ericsson indoor_connect_8855_firmware to version 2025.q2 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| ericsson | indoor_connect_8855_firmware |
< 2025.q2 cpe:2.3:o:ericsson:indoor_connect_8855_firmware:*:*:*:*:*:*:*:* |
Original advisory text
Ericsson Indoor Connect 8855 contains a vulnerability where server-side security can be bypassed in the client which if exploited can lead to unauthorized disclosure of certain information.
Ericsson Indoor Connect 8855 contains a vulnerability where server-side security can be bypassed in the client which if exploited can lead to unauthorized disclosure of certain information.
References
- https://www.ericsson.com/en/about-us/security/psirt/e2025-09-25 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Severity
5.1
Medium
Type
CWE-522Insufficiently Protected Credentials
Timeline
Published25 Sep 2025
Updated4 Nov 2026
First seen7 Mar 2026
Track software like this
Free during beta