Ericsson Network Manager (ENM), versions prior to 23.1, contains a vulnerability in the export function of application log where Improper Neutralization of Formula Elements in a CSV File can lead to code execution or information disclosure. There is limited impact to integrity and availability. The attacker on the adjacent network with administration access can exploit the vulnerability.
References
Link | Resource |
---|---|
https://www.ericsson.com/en/about-us/security/psirt/security-bulletin--ericsson-network-manager-march-2024 | Vendor Advisory |
Configurations
History
29 Apr 2024, 19:48
Type | Values Removed | Values Added |
---|---|---|
First Time |
Ericsson
Ericsson network Manager |
|
Summary |
|
|
References | () https://www.ericsson.com/en/about-us/security/psirt/security-bulletin--ericsson-network-manager-march-2024 - Vendor Advisory | |
CPE | cpe:2.3:a:ericsson:network_manager:*:*:*:*:*:*:*:* |
04 Apr 2024, 19:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-04-04 19:15
Updated : 2024-04-29 19:48
NVD link : CVE-2024-25007
Mitre link : CVE-2024-25007
CVE.ORG link : CVE-2024-25007
JSON object : View
Products Affected
ericsson
- network_manager
CWE
CWE-1236
Improper Neutralization of Formula Elements in a CSV File