Skip to content
OpenAdvisories
Medium · 6.8 CVE-2025-59177 EUVD-2025-210513GHSA-qh6w-fr9v-2742

Generation of Error Message Containing Sensitive Information Vulnerability

Published Jul 27, 2026 · Updated Jul 27, 2026 · Assigned by ERIC

Description

Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability in Configuration Management, allowing an attacker to execute specifically crafted commands to reveal system secret through error messages.

Affected products

VendorProductAffectedFixed
Ericsson Ericsson Packet Core Controller (PCC) < 1.39 1.39

References