CVE-2020-29144: In Ericsson BSCS iX R18 Billing & Rating iX R18, MX is a web base module in BSCS iX that is vulnerable to s...

Security readout for executives and security teams

CVE-2020-29144 affects the MX web module in Ericsson BSCS iX R18 Billing & Rating. A stored malicious comment in the Alert Dashboard could run in another user's browser. The CVE text says session hijacking was possible in most tests, creating potential account takeover risk, especially for administrators. Exposure appears limited to organizations running Ericsson BSCS iX R18 Billing & Rating with the MX web-based module and Alert Dashboard enabled. The supplied data does not prove other versions, products, or internet-facing deployments are affected. Prioritize assessment if BSCS iX R18 supports billing operations or privileged customer-management workflows. The business risk is account takeover inside a sensitive telecom billing platform, but urgency depends on deployment presence and administrative exposure. Mitigation focus: Check Ericsson support or vendor guidance for fixes or configuration advice.; Restrict MX and Alert Dashboard access to trusted administrative networks.; Review and remove suspicious Alert Dashboard comments if feasible..

Prepared

Jun 5, 2026, 13:31 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.