Ericsson-LG iPECS NMS A.1Ac
Approved changes feed: RSS · Atom
cpe:2.3:a:ericssonlg:ipecs_nms:a.1ac:*:*:*:*:*:*:*
part: a version: a.1ac update: *
| Vendor | Ericssonlg (4bf5b96e-9c4d-57a6-b08a-515638b83a02) |
|---|---|
| Product | Ipecs Nms (fe39d9e9-ea28-5b97-b53c-8b725a7a0c88) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-9245 |
vulnerable | 2026-06-08 05:12:07.962387 |
Details available
The Ericsson-LG iPECS NMS A.1Ac login portal has a SQL injection vulnerability in the User ID and password fields that allows users to bypass the login page and execute remote code on the operating system.
Published: 2018-04-22T13:00:00.000Z
Updated: 2024-08-05T07:17:52.077Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10286 |
vulnerable | 2026-06-08 05:10:26.550114 |
Details available
The Ericsson-LG iPECS NMS A.1Ac web application discloses sensitive information such as the NMS admin credentials and the PostgreSQL database credentials to logged-in users via the responses to certain HTTP POST requests. In order to be able to see the credentials in cleartext, an attacker needs to be authenticated.
Published: 2018-04-22T13:00:00.000Z
Updated: 2024-08-05T07:32:01.660Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10285 |
vulnerable | 2026-06-08 05:10:26.549581 |
Details available
The Ericsson-LG iPECS NMS A.1Ac web application uses incorrect access control mechanisms. Since the app does not use any sort of session ID, an attacker might bypass authentication.
Published: 2018-04-22T13:00:00.000Z
Updated: 2024-08-05T07:32:01.662Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.