CVE-2024-25008 Ericsson RAN Compute and Site Controller 6610 - Improper Input Validation Vulnerability
An attacker with administrator privileges can exploit improper input validation to execute arbitrary code and obtain a Linux shell on Ericsson RAN devices.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-25008?
CVE-2024-25008 is a medium-severity code injection vulnerability in Ericsson RAN Compute Basebands (all BB variants), published on 16 Aug 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Ericsson RAN Compute and Site Controller 6610 contains a vulnerability in the Control System where Improper Input Validation can lead to arbitrary code execution, for example to obtain a Linux Shell with the same privileges as the attacker. The attacker would require elevated privileges for example a valid OAM user having the system administrator role to exploit the vulnerability.
Weakness: CWE-20
Which versions are affected by CVE-2024-25008?
How do I fix CVE-2024-25008?
No fix has been published for CVE-2024-25008 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2024-25008 being exploited?
There is no known exploitation of CVE-2024-25008 in the wild and no public exploit code.
Sources
Also known as GHSA-qf26-f55x-v3rc.