Approved changes feed: RSS · Atom

cpe:2.3:o:ericsson:indoor_connect_8855_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorEricsson (198bbf36-f632-548c-bd14-c61a678abe8e)
ProductIndoor Connect 8855 Firmware (b047c801-3c63-5fa5-bb83-6cc6e4b59e57)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-40842 vulnerable 2026-06-08 07:25:06.233670 Ericsson Indoor Connect 8855 - Improper Neutralization of Input During Web Page Generation Vulnerability
Ericsson Indoor Connect 8855 versions prior to 2025.Q3 contains a Cross-Site Scripting (XSS) vulnerability which, if exploited, can lead to unauthorized disclosure and modification of certain information.
Published: 2026-03-25T13:10:44.010Z
Updated: 2026-03-25T13:44:10.955Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40841 vulnerable 2026-06-08 07:25:06.233077 Ericsson Indoor Connect 8855 - Cross-Site Request Forgery Vulnerability
Ericsson Indoor Connect 8855 versions prior to 2025.Q3 contains a Cross-Site Request Forgery (CSRF) vulnerability which, if exploited, can lead to unauthorized modification of certain information.
Published: 2026-03-25T13:07:53.229Z
Updated: 2026-03-25T13:44:45.962Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40838 vulnerable 2026-06-08 07:25:06.232585 Ericsson Indoor Connect 8855 - Insufficiently Protected Credentials Vulnerability
Ericsson Indoor Connect 8855 contains a vulnerability where server-side security can be bypassed in the client which if exploited can lead to unauthorized disclosure of certain information.
Published: 2025-09-25T14:54:43.229Z
Updated: 2025-09-30T12:15:44.492Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40837 vulnerable 2026-06-08 07:25:06.232097 Ericsson Indoor Connect 8855 - Missing Authorization Vulnerability
Ericsson Indoor Connect 8855 contains a missing authorization vulnerability which if exploited can allow access to the system as a user with higher privileges than intended.
Published: 2025-09-25T14:52:23.376Z
Updated: 2025-09-30T12:15:13.648Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40836 vulnerable 2026-06-08 07:25:06.230668 Ericsson Indoor Connect 8855 - Improper Input Validation Vulnerability
Ericsson Indoor Connect 8855 contains an improper input validation vulnerability which if exploited can allow an attacker to execute commands with escalated privileges.
Published: 2025-09-25T14:49:02.613Z
Updated: 2025-09-30T12:14:36.904Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27262 vulnerable 2026-06-08 07:14:54.604165 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27261 vulnerable 2026-06-08 07:14:54.603730 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27260 vulnerable 2026-06-08 07:14:54.602513 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.