Improper input validation in Ericsson Indoor Connect 8855

CVE-2025-40836

Ericsson Indoor Connect 8855 contains an improper input validation vulnerability which if exploited can allow an attacker to execute commands with escalated privileges.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.002 (38.7th percentile) — read the EPSS interpretation.