https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2018-15138.htmlhttps://patchthecve.com/cve/CVE-2018-15138.htmlWed, 17 Jun 2026 01:42:06 +0000HIGH 7.5: Ericsson-LG iPECS NMS 30M allows directory traversal via ipecs-cm/download?filename=../ URIs.https://patchthecve.com/cve/CVE-2018-9245.htmlhttps://patchthecve.com/cve/CVE-2018-9245.htmlWed, 17 Jun 2026 02:06:16 +0000CRITICAL 9.8: The Ericsson-LG iPECS NMS A.1Ac login portal has a SQL injection vulnerability in the User ID and password fields that allows users to bypass the login page and execute remote code on the operating system.https://patchthecve.com/cve/CVE-2018-10286.htmlhttps://patchthecve.com/cve/CVE-2018-10286.htmlWed, 17 Jun 2026 01:33:48 +0000HIGH 8.8: The Ericsson-LG iPECS NMS A.1Ac web application discloses sensitive information such as the NMS admin credentials and the PostgreSQL database credentials to logged-in users via the responses to certain HTTP POST requests. In order to be able to see the credentials in cleartext, an attacker needs to https://patchthecve.com/cve/CVE-2018-10285.htmlhttps://patchthecve.com/cve/CVE-2018-10285.htmlWed, 17 Jun 2026 01:33:48 +0000CRITICAL 9.8: The Ericsson-LG iPECS NMS A.1Ac web application uses incorrect access control mechanisms. Since the app does not use any sort of session ID, an attacker might bypass authentication.