CVE Feed

    Dashboard / CVE / CVE-2024-25007

    CVE-2024-25007

    Ericsson Network Manager (ENM), versions prior to 23.1, contains a vulnerability in the export function of application log where Improper Neutralization of Formula Elements in a CSV File can lead to code execution or information disclosure. There is limited impact to integrity and availability. The attacker on the adjacent network with administration access can exploit the vulnerability.

    Published:Apr 4, 2024
    Last Modified:Nov 21, 2024
    EPS:Apr 4, 2024
    EPSS Score:0.00054
    CVSS Score:7.1

    Affected Products

    Vendor
    Ericsson
    Product
    Network Manager

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2025-27258 (CVSS 6.9) — Ericsson Network Manager (ENM) versions prior to ENM 25.1 GA contain a vulnerability, if exploited, can result…
    CVE-2025-27259 (CVSS 2.4) — Ericsson Network Manager versions prior to ENM 25.2 GA contain a vulnerability that, if exploited, can exfiltr…
    CVE-2023-39909 (CVSS 8.8) — Ericsson Network Manager before 23.2 mishandles Access Control and thus unauthenticated low-privilege users ca…
    CVE-2022-46408 (CVSS 6.8) — Ericsson Network Manager (ENM), versions prior to 22.1, contains a vulnerability in the application Network Co…
    CVE-2022-46407 (CVSS 4.8) — Ericsson Network Manager (ENM), versions prior to 22.2, contains a vulnerability in the REST endpoint “editpro…
    CVE-2021-32570 (CVSS 4.9) — In Ericsson Network Manager (ENM) releases before 21.2, users belonging to the same AMOS authorization group c…
    CVE-2021-28488 (CVSS 6.5) — Ericsson Network Manager (ENM) before 21.2 has incorrect access-control behavior (that only affects the level …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High