CVE-2024-25008
CVSS V2 None
CVSS V3 None
Description
Ericsson RAN Compute and Site Controller 6610 contains a vulnerability in the Control System where Improper Input Validation can lead to arbitrary code execution, for example to obtain a Linux Shell with the same privileges as the attacker. The attacker would require elevated privileges for example a valid OAM user having the system administrator role to exploit the vulnerability.
Overview
- CVE ID
- CVE-2024-25008
- Assigner
- ERIC
- Vulnerability Status
- PUBLISHED
- Published Version
- 2024-08-16T09:42:21.010Z
- Last Modified Date
- 2024-08-16T13:50:48.465Z
Weakness Enumerations
References
| Reference URL | Reference Tags |
|---|---|
| https://www.ericsson.com/en/about-us/security/psirt/security-bulletin-ericsson-ran-compute-august-2024 |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2024-25008 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25008 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2024-08-17 13:10:18 | Added to TrackCVE |