CVE-2024-25010
High
Description
Ericsson RAN Compute and Site Controller 6610 contains in certain configurations a high severity vulnerability where improper input validation could be exploited leading to arbitrary code execution.
SeverityHigh
CVSS8.8
Exploit probability—
ProductEricsson RAN Compute Basebands (all BB variants)
PublishedMay 22, 2025
First seenMay 22, 2025
Weakness typeCWE-20Improper input validation
How to fix
Update
- Ericsson Ericsson RAN Compute Basebands (all BB variants)24.Q4, RCG123.1-4 or later
- Ericsson Site Controller 6610S24.Q4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Ericsson Ericsson RAN Compute Basebands (all BB variants) | v < 24.Q4, v < RCG123.1-4 | 24.Q4, RCG123.1-4 |
| Ericsson Site Controller 6610 | v < S24.Q4 | S24.Q4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.