Our CVE Story: Ericsson’s Journey as a CVE Numbering Authority (CNA)

Guest authors Milind R. Kulkarni and Umair Bukhari are both from the Ericsson Product Security Incident Response Team (PSIRT). Milind is Master Security Specialist and Umair is Head of the PSIRT. Ericsson is a CVE Numbering Authority (CNA) partner.

Ericsson, a global leader in telecommunications technology, achieved CNA status in January 2024. Over the past two decades, Ericsson Product Security has diligently been working to enhance product security, benefiting telecom networks worldwide. This milestone marks a significant advancement …

authority authors cna cve ericsson global head incident incident response incident response team information security information technology journey leader master partner product product security psirt response security security incident security incident response team story team technology telecommunication telecommunications vulnerability vulnerability management