Telstra

8 credited records · 3 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Credited records

Researchers

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
34Monitor	CVE-2025-40842No exploit	Ericsson Indoor Connect 8855 - Improper Neutralization of Input During Web Page Generation Vulnerabilityericsson · indoor connect 8855 firmware · CWE-79 XSS	High8.5	—	0.1%	Mar 25, 2026
20Monitor	CVE-2025-40841No exploit	Ericsson Indoor Connect 8855 - Cross-Site Request Forgery Vulnerabilityericsson · indoor connect 8855 firmware · CWE-352 CSRF	Medium5.1	—	0.1%	Mar 25, 2026
28Monitor	CVE-2025-27260No exploit	Ericsson Indoor Connect 8855 - Improper Filtering of Special Elements Vulnerabilityericsson · indoor connect 8855 firmware · CWE-790	High7.2	—	0.2%	Mar 25, 2026
20Monitor	CVE-2025-40838No exploit	Ericsson Indoor Connect 8855 - Insufficiently Protected Credentials Vulnerabilityericsson · indoor connect 8855 firmware · CWE-522 Info leak	Medium5.1	—	0.4%	Sep 25, 2025
34Monitor	CVE-2025-40837No exploit	Ericsson Indoor Connect 8855 - Missing Authorization Vulnerabilityericsson · indoor connect 8855 firmware · CWE-862 Broken access control (IDOR)	High8.7	—	0.3%	Sep 25, 2025
34Monitor	CVE-2025-40836No exploit	Ericsson Indoor Connect 8855 - Improper Input Validation Vulnerabilityericsson · indoor connect 8855 firmware · CWE-20	High8.7	—	0.4%	Sep 25, 2025
34Monitor	CVE-2025-27262No exploit	Ericsson Indoor Connect 8855 - Improper Neutralization of Special Elements used in an OS Command Vulnerabilityericsson · indoor connect 8855 firmware · CWE-78 RCE Local privilege escalation Command injection	High8.5	—	0.7%	Sep 25, 2025
34Monitor	CVE-2025-27261No exploit	Ericsson Indoor Connect 8855 - Improper Neutralization of Special Elements used in an SQL Command Vulnerabilityericsson · indoor connect 8855 firmware · CWE-89 SQL injection	High8.7	—	0.3%	Sep 25, 2025

CVE-2025-40842
34Monitor
Ericsson Indoor Connect 8855 - Improper Neutralization of Input During Web Page Generation Vulnerability
HighCVSS 8.5No exploitEPSS 0%
- XSS
ericsson · indoor connect 8855 firmwareMar 25, 2026
CVE-2025-40841
20Monitor
Ericsson Indoor Connect 8855 - Cross-Site Request Forgery Vulnerability
MediumCVSS 5.1No exploitEPSS 0%
- CSRF
ericsson · indoor connect 8855 firmwareMar 25, 2026
CVE-2025-27260
28Monitor
Ericsson Indoor Connect 8855 - Improper Filtering of Special Elements Vulnerability
HighCVSS 7.2No exploitEPSS 0%
ericsson · indoor connect 8855 firmwareMar 25, 2026
CVE-2025-40838
20Monitor
Ericsson Indoor Connect 8855 - Insufficiently Protected Credentials Vulnerability
MediumCVSS 5.1No exploitEPSS 0%
- Info leak
ericsson · indoor connect 8855 firmwareSep 25, 2025
CVE-2025-40837
34Monitor
Ericsson Indoor Connect 8855 - Missing Authorization Vulnerability
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
ericsson · indoor connect 8855 firmwareSep 25, 2025
CVE-2025-40836
34Monitor
Ericsson Indoor Connect 8855 - Improper Input Validation Vulnerability
HighCVSS 8.7No exploitEPSS 0%
ericsson · indoor connect 8855 firmwareSep 25, 2025
CVE-2025-27262
34Monitor
Ericsson Indoor Connect 8855 - Improper Neutralization of Special Elements used in an OS Command Vulnerability
HighCVSS 8.5No exploitEPSS 1%
ericsson · indoor connect 8855 firmwareSep 25, 2025
CVE-2025-27261
34Monitor
Ericsson Indoor Connect 8855 - Improper Neutralization of Special Elements used in an SQL Command Vulnerability
HighCVSS 8.7No exploitEPSS 0%
- SQL injection
ericsson · indoor connect 8855 firmwareSep 25, 2025