Directory Traversal Vulnerability in Ericsson Packet Core Controller
CVE-2025-59181

4.8MEDIUM

Key Information:

Vendor

Ericsson

Status
Packet Core Controller (pcc)
Vendor
CVE Published:
27 July 2026

What is CVE-2025-59181?

The Ericsson Packet Core Controller (PCC) has a directory traversal vulnerability in its Configuration Management feature. This flaw allows attackers to potentially alter directory permissions, which can lead to unauthorized access and denial of service for legitimate users. Upgrading to versions 1.39 or later is critical for safeguarding configurations and maintaining system integrity.

Affected Version(s)

Packet Core Controller (PCC) 0 < 1.39

References

https://www.ericsson.com/en/about-us/security/psirt/secur...

CVSS V4

Score:
4.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Spark NZ
Radu Balaci and Meghna Patel from Bell Mobility (Canada)
.