CVE-2025-0636 - Vulnerability Details - OpenCVE

EMCLI contains a high severity vulnerability where improper neutralization of special elements used in an OS command could be exploited leading to Arbitrary Code Execution.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Ericsson	Controller 6610 Ran Compute

No data.

No data.

References

Link	Providers
https://www.ericsson.com/en/about-us/security/psirt/cve-2025-0636

History

Tue, 21 Oct 2025 13:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Ericsson Ericsson controller 6610 Ericsson ran Compute
Vendors & Products		Ericsson Ericsson controller 6610 Ericsson ran Compute

Tue, 14 Oct 2025 14:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Mon, 13 Oct 2025 06:30:00 +0000

Type	Values Removed	Values Added
Description		EMCLI contains a high severity vulnerability where improper neutralization of special elements used in an OS command could be exploited leading to Arbitrary Code Execution.
Title		Arbitrary Code Execution vulnerability in Ericsson RAN Compute and Site Controller
Weaknesses		CWE-78
References		https://www.ericsson.com/en/about-us/security/psirt/cve-2025-0636
Metrics		cvssV3_1 `{'score': 8.4, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: ERIC

Published: 2025-10-13T06:26:16.829Z

Updated: 2025-10-14T13:25:42.989Z

Reserved: 2025-01-22T10:46:30.753Z

Link: CVE-2025-0636

Vulnrichment

Updated: 2025-10-14T13:25:39.088Z

NVD

Status : Awaiting Analysis

Published: 2025-10-13T07:15:48.883

Modified: 2025-10-14T19:36:59.730

Link: CVE-2025-0636

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-0636", "assignerOrgId": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf", "state": "PUBLISHED", "assignerShortName": "ERIC", "dateReserved": "2025-01-22T10:46:30.753Z", "datePublished": "2025-10-13T06:26:16.829Z", "dateUpdated": "2025-10-14T13:25:42.989Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Site Controller 6610", "vendor": "Ericsson", "versions": [{"changes": [{"at": "S24.Q2, S24.Q3.1 S24.Q4 S25.Q1", "status": "unaffected"}], "lessThan": "S24.Q2", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RAN Compute (all BB versions)", "vendor": "Ericsson", "versions": [{"changes": [{"at": "4.Q1.C5 24.Q2 24.Q3 24.Q4 25.Q1 RCG123.1 RCG123.2 RCG123.3", "status": "unaffected"}], "lessThan": "24.Q1.C5", "status": "affected", "version": "0", "versionType": "custom"}]}], "datePublic": "2025-10-10T06:50:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">EMCLI contains a high severity vulnerability where improper neutralization of special elements used in an OS command could be exploited leading to Arbitrary Code Execution.   </span>\n\n<br>"}], "value": "EMCLI contains a high severity vulnerability where improper neutralization of special elements used in an OS command could be exploited leading to Arbitrary Code Execution."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-78", "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf", "shortName": "ERIC", "dateUpdated": "2025-10-13T06:26:16.829Z"}, "references": [{"url": "https://www.ericsson.com/en/about-us/security/psirt/cve-2025-0636"}], "source": {"discovery": "UNKNOWN"}, "title": "Arbitrary Code Execution vulnerability in Ericsson RAN Compute and Site Controller", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-10-14T13:25:34.279595Z", "id": "CVE-2025-0636", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-14T13:25:42.989Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"cna": {"title": "Arbitrary Code Execution vulnerability in Ericsson RAN Compute and Site Controller", "source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.4, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Ericsson", "product": "Site Controller 6610", "versions": [{"status": "affected", "changes": [{"at": "S24.Q2, S24.Q3.1 S24.Q4 S25.Q1", "status": "unaffected"}], "version": "0", "lessThan": "S24.Q2", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Ericsson", "product": "RAN Compute (all BB versions)", "versions": [{"status": "affected", "changes": [{"at": "4.Q1.C5 24.Q2 24.Q3 24.Q4 25.Q1 RCG123.1 RCG123.2 RCG123.3", "status": "unaffected"}], "version": "0", "lessThan": "24.Q1.C5", "versionType": "custom"}], "defaultStatus": "unaffected"}], "datePublic": "2025-10-10T06:50:00.000Z", "references": [{"url": "https://www.ericsson.com/en/about-us/security/psirt/cve-2025-0636"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "EMCLI contains a high severity vulnerability where improper neutralization of special elements used in an OS command could be exploited leading to Arbitrary Code Execution.", "supportingMedia": [{"type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">EMCLI contains a high severity vulnerability where improper neutralization of special elements used in an OS command could be exploited leading to Arbitrary Code Execution.   </span>\n\n<br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-78", "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"}]}], "providerMetadata": {"orgId": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf", "shortName": "ERIC", "dateUpdated": "2025-10-13T06:26:16.829Z"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-0636", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-10-14T13:25:34.279595Z"}}}], "providerMetadata": {"shortName": "CISA-ADP", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "dateUpdated": "2025-10-14T13:25:39.088Z"}}]}, "cveMetadata": {"cveId": "CVE-2025-0636", "state": "PUBLISHED", "dateUpdated": "2025-10-13T06:26:16.829Z", "dateReserved": "2025-01-22T10:46:30.753Z", "assignerOrgId": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf", "datePublished": "2025-10-13T06:26:16.829Z", "assignerShortName": "ERIC"}, "dataVersion": "5.1"}