CVE-2022-47531: Ericsson Evolved Packet Gateway

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

An issue was discovered in Ericsson Evolved Packet Gateway (EPG) versions 3.x before 3.25 and 2.x before 2.16, allows authenticated users to bypass system CLI and execute commands they are authorized to execute directly in the UNIX shell.

Affected products

• Ericsson Evolved Packet Gateway: from 2.0, before 2.16 (fixed in 2.16); from 3.0, before 3.25 (fixed in 3.25)

Published 2023-12-05. Last modified 2026-06-17.