VULNERABILITY INTELLIGENCE
CVE-2025-59180
EPSS probability0.16%
CISA KEVNot currently listed
Published2026-07-27
Last modified2026-09-29
Description
Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain a hardcoded credential vulnerability in the alarm system. An attacker with access to the cluster with knowledge of the hardcoded credential can read alarm and alert information.
Weakness classification
- 85b1779b-6ecd-4f52-bcc5-73eac4659dcf: CWE-798