CVE-2025-59174CWE-228
CVE-2025-59174
Medium · published June 5, 2026
What it is
Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability where an attacker sending a large volume of specially crafted messages may cause service degradation.
The record
Technical detail
- CVSS v3.1
- 6.5 · MEDIUM
- Vector
- CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00165 · 5.4th percentile
- Weakness
- CWE-228 · Improper Handling of Syntactically Invalid Structure
- Published
- 2026-06-05T19:16Z
Affected products (1)
| Product | Versions | Fixed in |
|---|
| ericsson/packet_core_controller | < 1.39 | 1.39 |
References (1)
EPSS history
Timeline