RCE in Ericsson Packet Core Controller (Pcc)

CVE-2025-59172

Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain an Improper Neutralization of Special Elements vulnerability allowing an attacker to execute arbitrary code as root.

Vulnerability class: Command Injection (OS Command Injection)

Affected products

Weakness classification (CWE)

References