Description
Ericsson RAN Compute and Site Controller 6610 contains a vulnerability in the Control System where Improper Input Validation can lead to arbitrary code execution, for example to obtain a Linux Shell with the same privileges as the attacker. The attacker would require elevated privileges for example a valid OAM user having the system administrator role to exploit the vulnerability.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Ericsson Ericsson RAN Compute Basebands (all BB variants)
Default version status: unaffected
0 to < 24.Q2affected
Ericsson Site Controller 6610
Default version status: unaffected
0 to < 24.Q2affected