CVE-2025-59178: medium-severity vulnerability in Ericsson Packet Core Controller (PCC)
Exposure of Sensitive System Information to an Unauthorized Control Sphere Vulnerability
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.8epss 0.2%
Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain an Exposure of Sensitive System Information vulnerability in Configuration Management allowing an attacker to enumerate other users on the system.
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
Affected products
Ericsson · Packet Core Controller (PCC)Related CVEs — Ericsson Packet Core Controller (PCC)
In the same product, most dangerous first.
CVE-2025-59181MEDIUMPath traversal VulnerabilityEPSS 0.4%CVE-2024-53828MEDIUMEricsson Packet Core Controller (PCC) - Improper Handling of Syntactically Invalid Structure VulnerabilityEPSS 0.4%CVE-2025-59172HIGHImproper Neutralization of Special Elements used in an OS Command VulnerabilityEPSS 0.3%CVE-2025-59180MEDIUMUse of Hard-coded Credentials VulnerabilityEPSS 0.2%