Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2025-0636

Arbitrary Code Execution vulnerability in Ericsson RAN Compute and Site Controller

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ERIC

Description

EMCLI contains a high severity vulnerability where improper neutralization of special elements used in an OS command could be exploited leading to Arbitrary Code Execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ericsson Site Controller 6610

Default version status: unaffected

  • 0 to < S24.Q2affected

Ericsson RAN Compute (all BB versions)

Default version status: unaffected

  • 0 to < 24.Q1.C5affected

References