EUVD-2025-210515
GHSA-q7vc-m7jc-pp7f
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from Vendor (ERIC) · only source for this CVE.
CVSS VectorVendor: ERIC
Lifecycle Timeline
2DescriptionCVE.org
Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain a hardcoded credential vulnerability in the alarm system. An attacker with access to the cluster with knowledge of the hardcoded credential can read alarm and alert information.
AnalysisAI
Hardcoded credential in Ericsson Packet Core Controller (PCC) versions before 1.38 allows an attacker with cluster access to read alarm and alert information
More in Packet Core Controller Pcc
View allCommand injection in Ericsson Packet Core Controller (PCC) prior to version 1.38 allows authenticated high-privilege att
Directory traversal in Ericsson Packet Core Controller (PCC) Configuration Management allows authenticated attackers wit
Information disclosure vulnerability in Ericsson Packet Core Controller (PCC) versions before 1.39 permits an attacker w
Same weakness CWE-798 – Use of Hard-coded Credentials
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today