Vulnerabilities (CVE)

Filtered by vendor Ericsson Subscribe
Total 23 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2003-1442 1 Ericsson 1 Hm220dp Adsl Modem 2017-07-29 7.5 HIGH N/A
The web administration page for the Ericsson HM220dp ADSL modem does not require authentication, which could allow remote attackers to gain access from the LAN side.
CVE-2015-2167 1 Ericsson 1 Drutt Mobile Service Delivery Platform 2016-12-03 5.8 MEDIUM N/A
Open redirect vulnerability in the 3PI Manager in Ericsson Drutt Mobile Service Delivery Platform (MSDP) 4, 5, and 6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter to jsp/start-3pi-manager.jsp.
CVE-2015-2166 1 Ericsson 1 Drutt Mobile Service Delivery Platform 2016-12-03 5.0 MEDIUM N/A
Directory traversal vulnerability in the Instance Monitor in Ericsson Drutt Mobile Service Delivery Platform (MSDP) 4, 5, and 6 allows remote attackers to read arbitrary files via a ..%2f (dot dot encoded slash) in the default URI.