Configuration Management Flaw in Ericsson Packet Core Controller
CVE-2025-59177

6.8MEDIUM

Key Information:

Vendor

Ericsson

Status
Ericsson Packet Core Controller (pcc)
Vendor
CVE Published:
27 July 2026

What is CVE-2025-59177?

The Ericsson Packet Core Controller (PCC) prior to version 1.39 has a vulnerability in its Configuration Management framework. This flaw allows malicious actors to execute specially crafted commands that can reveal sensitive system information through misleading error messages. This exposure of system secrets poses a significant risk to the integrity and confidentiality of the affected environment, potentially allowing unauthorized access to critical data.

Affected Version(s)

Ericsson Packet Core Controller (PCC) 0 < 1.39

References

https://www.ericsson.com/en/about-us/security/psirt/secur...

CVSS V4

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Spark NZ
Radu Balaci and Meghna Patel from Bell Mobility (Canada)
.