CVE-2021-28485 | BDVDB-2026-211883 Detail

Description#

In Ericsson Mobile Switching Center Server (MSC-S) before IS 3.1 CP22, the SIS web application allows relative path traversal via a specific parameter in the https request after authentication, which allows access to files on the system that are not intended to be accessible via the web application.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.gruppotim.it/it/footer/red-team.html
https://www.ericsson.com/en/about-us/security/psirt

Exploit#

No public exploit known

History#

Version 12023-09-14Record published in the CVE List.
Version 22024-09-25Most recent update recorded in the CVE List.