VYPR
← All advisories
High severity7.5NVD Advisory· Published Sep 25, 2025· Updated Apr 29, 2026

CVE-2025-40838

CVE-2025-40838

Description

Ericsson Indoor Connect 8855 contains a vulnerability where server-side security can be bypassed in the client which if exploited can lead to unauthorized disclosure of certain information.

Affected products

2
  • Ericsson/Indoor Connect 8855 Firmware2 versions
    cpe:2.3:o:ericsson:indoor_connect_8855_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:ericsson:indoor_connect_8855_firmware:*:*:*:*:*:*:*:*range: <2025.q2
    • (no CPE)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.