Vulnerability in Ericsson Packet Core Controller (Pcc)
CVE-2025-59180
Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain a hardcoded credential vulnerability in the alarm system. An attacker with access to the cluster with knowledge of the hardcoded credential can read alarm and alert information.
EPSS: 0.001 (1.4th percentile) — read the EPSS interpretation.
Affected products
- Ericsson Packet Core Controller (Pcc) — versions 0