Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Ericsson Indoor Connect 8855 versions prior to 2025.Q3 contains a Cross-Site Scripting (XSS) vulnerability which, if exploited, can lead to unauthorized disclosure and modification of certain information.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
⚡ New CVE Alert: CVE-2025-40842 📊 Severity: 8.5 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-40842 #CVE-2025-40842 #CVE #High #CyberSecurity #InfoSec https://t.co/McRyUgzMgB
Post summary
The tweet announces a new high‑severity CVE (CVE‑2025‑40842) and points to its NVD entry, but provides no technical details, PoC, exploit, or patch information.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | ericsson | indoor_connect_8855 | - | - | - |
| OS | ericsson | indoor_connect_8855_firmware | - | - | - |