EUVD-2025-210512
GHSA-8j5f-6vjg-rf7w
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessObtain high-privilege credentials
-
ExploitAccess adjacent network management interface
-
ExecutionSend crafted command injection payload
-
ImpactExecute arbitrary code as root
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A05:2025 - Injection
ASVS 5.0
V1 - Encoding and Sanitization OS command sanitization, avoid shell exec
MITRE ATT&CK
2 techniques across 1 tactic: Execution The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Exploitation requires adjacent network access to the PCC management interface and high-privilege credentials (administrator). The attacker must be authenticated with high privileges before injecting commands; unauthenticated remote exploitation is not possible. The vulnerability is not exploitable against default configurations without these prerequisites. |
| Impact | CVSS 4.0 base score 8.5 indicates high severity, but the real-world risk is reduced by the adjacent network (AV:A) and high privileges (PR:H) requirements. Exploitation requires an attacker to already have high-level credentials and be on the same network as the PCC, limiting the attack surface to insiders or compromised adjacent systems. No EPSS or KEV data is available; no public exploit is known. While the impact is critical (full system compromise as root), the pre-authentication and network adjacency constraints make widespread exploitation unlikely. The vulnerability is a high-priority concern for organizations deploying PCC but not an internet-scale risk. |
| Exploit ScenarioDerived | An attacker who has already compromised an administrator account on the PCC's network segment could send a crafted request to the vulnerable command execution endpoint, injecting OS commands that execute with root privileges, leading to full system takeover. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Jul 27, 2026
Command injection in Ericsson Packet Core Controller (PCC) prior to version 1.38 allows authenticated high-privilege attackers with adjacent network access to execute arbitrary code as root. The vulnerability stems from improper sanitization of special elements (CWE-78) in OS command execution. No public exploit or active exploitation reported.
RemediationAI
Upgrade to Ericsson Packet Core Controller version 1.38 or later, as specified in the vendor advisory. No workaround is provided; restrict network access to the management interface to trusted adjacent networks and enforce strong, unique credentials for all privileged accounts. Monitor for unauthorized access attempts.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The vulnerability is an OS command injection (CWE-78) in Ericsson Packet Core Controller, a software component handling mobile packet core functions. The CPE data indicates all versions prior to 1.38 are affected. The product likely processes input and passes it to a system shell without proper filtering, enabling execution of arbitrary commands. The attack vector adjacent network (AV:A) suggests the management interface is not exposed to the internet but accessible on the same network segment.
Know when Packet Core Controller Pcc gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Adjacent network attack vector and high privileges required; full compromise as root.
Primary rating from Vendor (ERIC).
CVSS VectorVendor: ERIC
Lifecycle Timeline
2DescriptionCVE.org
Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain an Improper Neutralization of Special Elements vulnerability allowing an attacker to execute arbitrary code as root.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
OS command injection occurs when an application passes unsanitized user input directly into system shell commands.
Remote Code Execution represents the critical moment when an attacker successfully runs arbitrary code on a target system without physical access.
More in Packet Core Controller Pcc
View allHardcoded credential in Ericsson Packet Core Controller (PCC) versions before 1.38 allows an attacker with cluster acces
Directory traversal in Ericsson Packet Core Controller (PCC) Configuration Management allows authenticated attackers wit
Information disclosure vulnerability in Ericsson Packet Core Controller (PCC) versions before 1.39 permits an attacker w
Exploit-DB