CVE-2018-10286: Ericssonlg Ipecs Nms

High severity, CVSS 8.8. EPSS: 6.3% chance of exploitation in the next 30 days.

The Ericsson-LG iPECS NMS A.1Ac web application discloses sensitive information such as the NMS admin credentials and the PostgreSQL database credentials to logged-in users via the responses to certain HTTP POST requests. In order to be able to see the credentials in cleartext, an attacker needs to be authenticated.

Affected products

• Ericssonlg Ipecs Nms: version a.1ac only

Published 2018-04-22. Last modified 2026-06-17.