PT-2026-64917 · Ericsson · Packet Core Controller

Spark Nz · CVE-2025-59178 · Publicado 2026-07-27 · Atualizado 2026-07-27

Mitre

CVSS v4.0

4.8

Média

Vetor base

AV:A/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain an Exposure of Sensitive System Information vulnerability in Configuration Management allowing an attacker to enumerate other users on the system.

Correção

Enumeração de Fraquezas

CWE-497

Identificadores relacionados

CVE-2025-59178

Produtos afetados

Packet Core Controller

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2025-59178 · Nota de Segurança
• https://ericsson.com/en/about-us/security/psirt/security-bulletin-pcc-july-2026 · Nota