Company Details
ericsson
97,356
2,217,176
517
ericsson.com
66
ERI_8911153
Completed

Ericsson Company CyberSecurity Posture
ericsson.comThe future of mobile isn’t on the horizon, it’s happening now. At Ericsson, we’re building the foundation for an open network ecosystem where industries, developers, and enterprises thrive. The convergence of 5G, AI, cloud, and network APIs isn’t just a technological shift; it’s a transformation that is redefining industries and enhancing everyday life. Open, programmable networks are enabling real-time innovation and unlocking new business models across the globe. Imagine a world where developers can dynamically access network capabilities on demand, where enterprises don’t just use connectivity but shape it. This isn’t a distant vision, it’s the ecosystem we’re creating today. Collaboration fuels everything we do. By working across industries, we’re designing a future where connectivity isn’t just seamless. It’s intelligent, programmable, and transformative. The shift is happening. Are you part of it?
Company Details
ericsson
97,356
2,217,176
517
ericsson.com
66
ERI_8911153
Completed
Between 800 and 849

Ericsson Global Score (TPRM)XXXX

Description: A new bug was recently discovered in Ericsson Network Manager product by the TIM Red Team Research. The bug focuses on the CWE Exposure of Resource to Wrong Sphere and results in incorrect access-control behavior. Variuos security issues can be encountered of it gets exploited.


No incidents recorded for Ericsson in 2025.
No incidents recorded for Ericsson in 2025.
No incidents recorded for Ericsson in 2025.
Ericsson cyber incidents detection timeline including parent company and subsidiaries

The future of mobile isn’t on the horizon, it’s happening now. At Ericsson, we’re building the foundation for an open network ecosystem where industries, developers, and enterprises thrive. The convergence of 5G, AI, cloud, and network APIs isn’t just a technological shift; it’s a transformation that is redefining industries and enhancing everyday life. Open, programmable networks are enabling real-time innovation and unlocking new business models across the globe. Imagine a world where developers can dynamically access network capabilities on demand, where enterprises don’t just use connectivity but shape it. This isn’t a distant vision, it’s the ecosystem we’re creating today. Collaboration fuels everything we do. By working across industries, we’re designing a future where connectivity isn’t just seamless. It’s intelligent, programmable, and transformative. The shift is happening. Are you part of it?


At TELUS, our purpose-driven team works together every day to innovate and do good. From providing technology solutions that make our lives safer and easier, to supporting those who need it most, our inclusive, spirited and giving people are passionate about empowering our customers, communities and
Welcome to Deutsche Telekom. As one of the world's most valuable brands, we design innovative solutions and products in the areas of connectivity, networks, digitalization and security. #connectingyourworld At Deutsche Telekom, we believe that each and every one of us has the power to move society

We are Telecom Argentina, a connectivity solutions and entertainment company with over 23,000 collaborators throughout the country. We transform the digital experience of our over 28 million customers providing them a secure, flexible and dynamic service on all of their devices, with high speed mobi

Vivo (Telefônica Brasil) is part of the Telefónica Group and with more than 94 million customers, of which 75 million mobile and 19 million fixed, we are the largest telecommunications company in Brazil, with nationwide presence and a complete, convergent portfolio of products, combining fixed, mobi
Cox Communications is committed to creating more moments of real human connection. We bring people closer to family and friends through technology that’s inspired by a culture that puts people first, and we’re always working to improve life in the communities we serve. Our world-class broadband appl

Mobile TeleSystems OJSC ("MTS") is the leading telecommunications group in Russia, Eastern Europe and Central Asia, offering mobile and fixed voice, broadband, pay TV as well as content and entertainment services in one of the world's fastest growing regions. Including its subsidiaries, as of Decemb

Since its establishment in 1854, Telecom Egypt has played a pivotal role in driving growth within the local ICT market capitalizing on its vast infrastructure, which is one of the largest in the region. Its vast domestic and international infrastructure has helped it serve various customer groups in

Pakistan’s number one digital operator and the largest internet and broadband service provider with over 70 million subscribers nationwide. With a legacy of more than 27 years, Jazz maintains market leadership through cutting-edge, integrated technology, the strongest brands and the largest portfoli

Mega es una empresa cien por ciento mexicana y líder en el sector de Telecomunicaciones, tenemos 45 años de servicio y casi 5 millones de suscriptores a quienes les ofrecemos los servicios de TV, internet, telefonía digital y móvil. Estamos en constante crecimiento, hoy en día tenemos presenci
.png)
AI standards, cybersecurity frameworks and tech policy is paused at NIST. U.S. Copyright Office is closed but accepting filings for...
Private network security startup OneLayer signs a utility partnership with Nokia; The startup has already told Fierce that utilities are one...
Airbus and Ericsson (NASDAQ: ERIC) have successfully deployed a private 5G solution at the Airbus production site in Hamburg, with another...
In a bid to accelerate innovation in 5G and cloud-native mobile networking, Swedish telecom giant Ericsson has launched a new global joint...
Under the agreement reached by telecommunications market leaders, Play announced it will further develop one of the most modern and currently largest mobile...
ANI ... New Delhi [India], August 11 (ANI): In a significant move towards creating industry-ready skilled manpower, Bharat Sanchar Nigam Limited (...
In a significant move towards creating industry-ready skilled manpower, Bharat Sanchar Nigam Limited (BSNL) has signed strategic Memoranda of...
Bharat Sanchar Nigam Limited (BSNL) has signed strategic agreements with Ericsson India, Qualcomm Technologies, Cisco Systems, and Nokia...
The collaboration aims to train over 2000 students annually in 5G, AI, cybersecurity, and networking, marking a significant step towards...

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of Ericsson is http://www.ericsson.com.
According to Rankiteo, Ericsson’s AI-generated cybersecurity score is 805, reflecting their Good security posture.
According to Rankiteo, Ericsson currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, Ericsson is not certified under SOC 2 Type 1.
According to Rankiteo, Ericsson does not hold a SOC 2 Type 2 certification.
According to Rankiteo, Ericsson is not listed as GDPR compliant.
According to Rankiteo, Ericsson does not currently maintain PCI DSS compliance.
According to Rankiteo, Ericsson is not compliant with HIPAA regulations.
According to Rankiteo,Ericsson is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Ericsson operates primarily in the Telecommunications industry.
Ericsson employs approximately 97,356 people worldwide.
Ericsson presently has no subsidiaries across any sectors.
Ericsson’s official LinkedIn profile has approximately 2,217,176 followers.
Ericsson is classified under the NAICS code 517, which corresponds to Telecommunications.
No, Ericsson does not have a profile on Crunchbase.
Yes, Ericsson maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/ericsson.
As of December 11, 2025, Rankiteo reports that Ericsson has experienced 1 cybersecurity incidents.
Ericsson has an estimated 9,686 peer or competitor companies worldwide.
Incident Types: The types of cybersecurity incidents that have occurred include Vulnerability.
Title: Ericsson Network Manager Product Bug
Description: A new bug was recently discovered in Ericsson Network Manager product by the TIM Red Team Research. The bug focuses on the CWE Exposure of Resource to Wrong Sphere and results in incorrect access-control behavior. Various security issues can be encountered if it gets exploited.
Type: Vulnerability
Attack Vector: Exposure of Resource to Wrong Sphere
Vulnerability Exploited: CWE Exposure of Resource to Wrong Sphere
Threat Actor: TIM Red Team Research
Common Attack Types: The most common types of attacks the company has faced is Vulnerability.

Entity Name: Ericsson
Entity Type: Corporation
Industry: Telecommunications
Last Attacking Group: The attacking group in the last incident was an TIM Red Team Research.
.png)
FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions prior to 16.0.96 and 17.0.1 through 17.0.9 have a weak default password. By default, this is a 6 digit numeric value which can be brute forced. (This is the app_password parameter). Depending on local configuration, this password could be the extension, voicemail, user manager, DPMA or EPM phone admin password. This issue is fixed in versions 16.0.96 and 17.0.10.
Neuron is a PHP framework for creating and orchestrating AI Agents. In versions 2.8.11 and below, the MySQLWriteTool executes arbitrary SQL provided by the caller using PDO::prepare() + execute() without semantic restrictions. This is consistent with the name (“write tool”), but in an LLM/agent context it becomes a high-risk capability: prompt injection or indirect prompt manipulation can cause execution of destructive queries such as DROP TABLE, TRUNCATE, DELETE, ALTER, or privilege-related statements (subject to DB permissions). Deployments that expose an agent with MySQLWriteTool enabled to untrusted input and/or run the tool with a DB user that has broad privileges are impacted. This issue is fixed in version 2.8.12.
Neuron is a PHP framework for creating and orchestrating AI Agents. Versions 2.8.11 and below use MySQLSelectTool, which is vulnerable to Read-Only Bypass. MySQLSelectTool is intended to be a read-only SQL tool (e.g., for LLM agent querying, however, validation based on the first keyword (e.g., SELECT) and a forbidden-keyword list does not block file-writing constructs such as INTO OUTFILE / INTO DUMPFILE. As a result, an attacker who can influence the tool input (e.g., via prompt injection through a public agent endpoint) may write arbitrary files to the DB server if the MySQL/MariaDB account has the FILE privilege and server configuration permits writes to a useful location (e.g., a web-accessible directory). This issue is fixed in version 2.8.12.
Okta Java Management SDK facilitates interactions with the Okta management API. In versions 11.0.0 through 20.0.0, race conditions may arise from concurrent requests using the ApiClient class. This could cause a status code or response header from one request’s response to influence another request’s response. This issue is fixed in version 20.0.1.
The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. When using versions 4.11.0 through 4.11.2 and 4.12.0, simultaneous requests on the same client may result in improper lookups in the TokenRequestCache for the request results. This issue is fixed in versions 4.11.2 and 4.12.1.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.