CVE-2024-25007CWE-1236

Ericsson Network Manager - Improper Neutralization of Formula Elements Vulnerability

High · published April 4, 2024

CVSS v3.1
7.1
EPSS
0%
Percentile
37.2
In the wild
Unconfirmed
What it is

Ericsson Network Manager (ENM), versions prior to 23.1, contains a vulnerability in the export function of application log where Improper Neutralization of Formula Elements in a CSV File can lead to code execution or information disclosure. There is limited impact to integrity and availability. The attacker on the adjacent network with administration access can exploit the vulnerability.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00441 · 37.2th percentile
Weakness
CWE-1236 · Improper Neutralization of Formula Elements in a CSV File
Published
2024-04-04T18:25Z
EPSS history
Timeline
  • 04 APR 18:25Z
    Ericsson Network Manager - Improper Neutralization of Formula Elements Vulnerability
    cvelistv5