PT-2026-64916 · Ericsson · Ericsson Packet Core Controller

Spark Nz · CVE-2025-59177 · Publicado 2026-07-27 · Atualizado 2026-07-27

NVD

CVSS v4.0

6.8

Média

Vetor base

AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability in Configuration Management, allowing an attacker to execute specifically crafted commands to reveal system secret through error messages.

Correção

Generation of Error Message Containing Sensitive Information

Enumeração de Fraquezas

CWE-209

Identificadores relacionados

CVE-2025-59177

Produtos afetados

Ericsson Packet Core Controller

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2025-59177 · Nota de Segurança
• https://ericsson.com/en/about-us/security/psirt/security-bulletin-pcc-july-2026 · Nota