CVEvulnerability

CVE-2024-25007

7.1 HIGH Published 2024-04-04 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2024-04-04
Last modified
2026-06-17
Assigner
85b1779b-6ecd-4f52-bcc5-73eac4659dcf
CVSS 3.1 (85b1779b-6ecd-4f52-bcc5-73eac4659dcf)
7.1 HIGH — CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:L
CVSS 3.1 ([email protected])
7.1 HIGH — CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:L
Weaknesses
CWE-1236

Description

Ericsson Network Manager (ENM), versions prior to 23.1, contains a vulnerability in the export function of application log where Improper Neutralization of Formula Elements in a CSV File can lead to code execution or information disclosure. There is limited impact to integrity and availability. The attacker on the adjacent network with administration access can exploit the vulnerability.

Affected configurations

• ericsson network manager (< 23.1)

Related

Weakness · CWE (1)

  • CWE-1236 Improper Neutralization of Formula Elements in a CSV File weakness

References