PT-2026-64915 · Ericsson · Packet Core Controller

Spark Nz · CVE-2025-59172 · Publicado 2026-07-27 · Atualizado 2026-07-27

Mitre

CVSS v4.0

8.5

Alta

Vetor base

AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain an Improper Neutralization of Special Elements vulnerability allowing an attacker to execute arbitrary code as root.

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2025-59172

Produtos afetados

Packet Core Controller

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2025-59172 · Nota de Segurança
• https://ericsson.com/en/about-us/security/psirt/security-bulletin-pcc-july-2026 · Nota