CVE-2025-40841

Published: Mar 25, 2026 Last Modified: Mar 25, 2026
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 5,1
Source: 85b1779b-6ecd-4f52-bcc5-73eac4659dcf
Attack Vector: network
Attack Complexity: low
Privileges Required: low
User Interaction: passive
Confidentiality: N/A
Integrity: N/A
Availability: N/A

Description

AI Translation Available

Ericsson Indoor Connect 8855 versions prior to 2025.Q3 contains a
Cross-Site Request Forgery (CSRF) vulnerability which, if exploited, can lead
to unauthorized modification of certain information.

352

Cross-Site Request Forgery (CSRF)

Stable
Abstraction: Compound Structure: Composite
Common Consequences
Security Scopes Affected:
Confidentiality Integrity Availability Non-Repudiation Access Control
Potential Impacts:
Gain Privileges Or Assume Identity Bypass Protection Mechanism Read Application Data Modify Application Data Dos: Crash, Exit, Or Restart
Applicable Platforms
Technologies: Web Based, Web Server
Likelihood of Exploit: Medium
View CWE Details
https://www.ericsson.com/en/about-us/security/psirt/CVE-202…
https://www.ericsson.com/en/about-us/security/psirt/CVE-2025-40841
https://www.ericsson.com/en/about-us/security/psirt/securit…
https://www.ericsson.com/en/about-us/security/psirt/security-bulletin-indoorcon…