CVE-2025-59177

Published: Lug 27, 2026 Last Modified: Lug 27, 2026
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 6,8
Source: 85b1779b-6ecd-4f52-bcc5-73eac4659dcf
Attack Vector: adjacent
Attack Complexity: low
Privileges Required: high
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A

Description

AI Translation Available

Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability in Configuration Management, allowing an attacker to execute specifically crafted commands to reveal system secret through error messages.

209

Generation of Error Message Containing Sensitive Information

Draft
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Confidentiality
Potential Impacts:
Read Application Data
Applicable Platforms
Languages: PHP, Java, Not Language-Specific
Likelihood of Exploit: High
View CWE Details
https://www.ericsson.com/en/about-us/security/psirt/securit…
https://www.ericsson.com/en/about-us/security/psirt/security-bulletin-pcc-july-…