CVE-2025-0636

EMCLI contains a high severity vulnerability where improper neutralization of special elements used in an OS command could be exploited leading to Arbitrary Code Execution.

CVSS v3 8.4 HIGH

8.4^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.7 / Impact : 6.0

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://www.ericsson.com/en/about-us/security/psirt/cve-2025-0636

Configurations

No configuration.

History

18 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) EMCLI contiene una vulnerabilidad de alta gravedad donde una neutralización inadecuada de elementos especiales utilizados en un comando del sistema operativo podría ser explotada, lo que llevaría a la ejecución de código arbitrario.

Information

Published : 2025-10-13 07:15

Updated : 2026-10-18 21:10

NVD link : CVE-2025-0636

Mitre link : CVE-2025-0636

CVE.ORG link : CVE-2025-0636

JSON object : View

Products Affected

No product.

CWE

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

{"id": "CVE-2025-0636", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-0636", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-10-14T13:25:34.279595Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.4, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 1.7}]}, "affected": [{"source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf", "affectedData": [{"vendor": "Ericsson", "product": "Site Controller 6610", "versions": [{"status": "affected", "changes": [{"at": "S24.Q2, S24.Q3.1 S24.Q4 S25.Q1", "status": "unaffected"}], "version": "0", "lessThan": "S24.Q2", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Ericsson", "product": "RAN Compute (all BB versions)", "versions": [{"status": "affected", "changes": [{"at": "4.Q1.C5 24.Q2 24.Q3 24.Q4 25.Q1 RCG123.1 RCG123.2 RCG123.3", "status": "unaffected"}], "version": "0", "lessThan": "24.Q1.C5", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2025-10-13T07:15:48.883", "references": [{"url": "https://www.ericsson.com/en/about-us/security/psirt/cve-2025-0636", "source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "EMCLI contains a high severity vulnerability where improper neutralization of special elements used in an OS command could be exploited leading to Arbitrary Code Execution."}, {"lang": "es", "value": "EMCLI contiene una vulnerabilidad de alta gravedad donde una neutralizaci\u00f3n inadecuada de elementos especiales utilizados en un comando del sistema operativo podr\u00eda ser explotada, lo que llevar\u00eda a la ejecuci\u00f3n de c\u00f3digo arbitrario."}], "lastModified": "2026-10-18T21:10:00.120", "sourceIdentifier": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf"}