PT-2026-64918 · Ericsson · Packet Core Controller

Spark Nz · CVE-2025-59180 · Publicado 2026-07-27 · Atualizado 2026-07-27

NVD

CVSS v4.0

5.1

Média

Vetor base

AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain a hardcoded credential vulnerability in the alarm system. An attacker with access to the cluster with knowledge of the hardcoded credential can read alarm and alert information.

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2025-59180

Produtos afetados

Packet Core Controller

Referências · 2

• https://ericsson.com/en/about-us/security/psirt/security-bulletin-pcc-july-2026 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-59180 · Nota de Segurança