High severity · published Oct 13, 2025
CVE-2025-0636
Arbitrary Code Execution vulnerability in Ericsson RAN Compute and Site Controller
8.4
CVSS
0.3%
EPSS
No
On KEV
Description
EMCLI contains a high severity vulnerability where improper neutralization of special elements used in an OS command could be exploited leading to Arbitrary Code Execution.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
Low
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 22% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RC
RAN Compute (all BB versions) · Ericsson
before 24.Q1.C5 · source: vendor
SC
Site Controller 6610 · Ericsson
before S24.Q2 · source: vendor