CVE-2025-59180

Vulnerability Description

Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain a hardcoded credential vulnerability in the alarm system. An attacker with access to the cluster with knowledge of the hardcoded credential can read alarm and alert information.

Related Weaknesses (CWE)

CWE-798

References

https://www.ericsson.com/en/about-us/security/psirt/security-bulletin-pcc-july-2

FAQ

What is CVE-2025-59180?

CVE-2025-59180 is a documented vulnerability. Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain a hardcoded credential vulnerability in the alarm system. An attacker with access to the cluster with knowledge of the hardcoded cr...

How severe is CVE-2025-59180?

CVSS scoring is not yet available for CVE-2025-59180. Check NVD for updates.

Is there a patch for CVE-2025-59180?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.