medium5.1
CVE-2025-59180
Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain a hardcoded credential vulnerability in the alarm system.
Impact
Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain a hardcoded credential vulnerability in the alarm system. An attacker with access to the cluster with knowledge of the hardcoded credential can read alarm and alert information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ericsson | Ericsson Packet Core Controller (PCC) | before 1.38 |
Versions were read from the advisory text. No structured product data has been published for this record yet.