Description
Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of Syntactically Invalid Structure (CWE-228) vulnerability where an attacker continuously sending a specially crafted message can cause service degradation. The impact continues as long the attack persists but the system recovers from the crashes when the attack stops.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ericsson | Packet Core Gateway (PCG) | < 1.30 | 1.30 |