CVE-2024-25007 is a vulnerability in Ericsson Network Manager (ENM) versions prior to 23.1, where improper neutralization of formula elements in CSV exports can lead to code execution or information disclosure. Rated 7.1 HIGH (CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:L), it requires an attacker with administrative access on an adjacent network and user interaction for exploitation, with limited impact on integrity and availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 23.1CPE matchmatch criteria | cpe:2.3:a:ericsson:network_manager:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:L
The average CVE in this peer group has 0.0 Twitter, 0.6 Reddit, 5.0 Bluesky, 1.1 Mastodon, and 3.0 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.1 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.