What is CVE-2024-25007?

CVE-2024-25007 is a high-severity vulnerability in Ericsson Network Manager, classified under Improper Neutralization of Formula Elements in a CSV File. CVSS score: 7.1/10. Published 2024-04-04.

How severe is CVE-2024-25007?

High severity. CVSS v3 base score is 7.1 out of 10.

Vulnerability in Ericsson Network Manager

CVE-2024-25007

Ericsson Network Manager (ENM), versions prior to 23.1, contains a vulnerability in the export function of application log where Improper Neutralization of Formula Elements in a CSV File can lead to code execution or information disclosur…

EPSS: 0.004 (35.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:L.

Affected products

Ericsson Network Manager — versions 0
Ericsson Network_manager

Weakness classification (CWE)

CWE-1236 — Improper Neutralization of Formula Elements in a CSV File

References

85b1779b-6ecd-4f52-bcc5-73eac4659dcf (Vendor Advisory)

Frequently asked questions

What is CVE-2024-25007?: CVE-2024-25007 is a high-severity vulnerability in Ericsson Network Manager, classified under Improper Neutralization of Formula Elements in a CSV File. CVSS score: 7.1/10. Published 2024-04-04.
How severe is CVE-2024-25007?: High severity. CVSS v3 base score is 7.1 out of 10.