CVE-2024-25010

Ericsson RAN Compute and Site Controller 6610 - Improper Input Validation Vulnerability

State: Published
Severity: 8.8 High
Published: May 22, 2025
Updated: May 22, 2025
Reserved: Feb 2, 2024

Description

Ericsson RAN Compute and Site Controller 6610 contains in certain configurations a high severity vulnerability where improper input validation could be exploited leading to arbitrary code execution.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	ERIC

Weaknesses

CWE-20 Improper Input Validation

Affected Products

Product	Versions
Ericsson RAN Compute Basebands (all BB variants)Ericsson	before 24.Q4Affectedfrom 24.Q4Not affectedfrom 24.Q3.IP2Not affectedfrom 24.Q2.C2Not affectedfrom 24.Q1.C3Not affectedfrom P-23.Q4.C5-1Not affectedfrom P-23.Q3.C6-1Not affectedfrom P-23.Q2.C6-1Not affected before RCG123.1-4Affectedfrom RCG123.1-4Not affected
Site Controller 6610Ericsson	before S24.Q4Affectedfrom S24.Q4Not affected

References

https://www.ericsson.com/en/about-us/security/psirt/CVE-2024-25010

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.