Is there a patch available for CVE-2025-59177?

Yes, a patch is available for CVE-2025-59177. Update the affected software to the latest version immediately.

Ericsson Packet Core Controller Pcc CVE-2025-59177

Q: What is the CVSS score of CVE-2025-59177?

CVE-2025-59177 has a CVSS 4.0 base score of 6.8 (Medium). CVSS vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2025-210513 MEDIUM

Error Message Information Leak (CWE-209)

2026-07-27 ERIC

GHSA-qh6w-fr9v-2742

Information Disclosure Ericsson Ericsson Packet Core Controller Pcc

6.8

CVSS 4.0 · Vendor: ERIC

Severity by source

Vendor (ERIC) PRIMARY

6.8 MEDIUM

CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (ERIC) · only source for this CVE.

CVSS VectorVendor: ERIC

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jul 27, 2026 - 15:10 vuln.today

Patch available

Jul 27, 2026 - 15:02 EUVD

DescriptionCVE.org

Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability in Configuration Management, allowing an attacker to execute specifically crafted commands to reveal system secret through error messages.

AnalysisAI

Information disclosure in Ericsson Packet Core Controller (PCC) prior to version 1.39 allows high-privileged attackers on adjacent networks to extract system secrets via error messages triggered by crafted Configuration Management commands. No public exploit or active exploitation has been identified at analysis time.