CVE-2024-25010

Published: May 22, 2025Modified: Jun 17, 2026Deferred

8.8

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: 85b1779b-6ecd-4f52-bcc5-73eac4659dcf (Secondary)

Description

Ericsson RAN Compute and Site Controller 6610 contains in certain configurations a high severity vulnerability where improper input validation could be exploited leading to arbitrary code execution.

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (1)

https://www.ericsson.com/en/about-us/security/psirt/CVE-2024-25010

Source: 85b1779b-6ecd-4f52-bcc5-73eac4659dcf

Timeline

No history available yet.