CVE-2025-59177 — Generation of Error Message Containing Sensitive Information Vulnerability

CVE-2025-59177

Generation of Error Message Containing Sensitive Information Vulnerability PUBLISHED

Description (CNA)

Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability in Configuration Management, allowing an attacker to execute specifically crafted commands to reveal system secret through error messages.

Affected (CNA)

Vendor / product	Versions
Ericsson / Ericsson Packet Core Controller (PCC)	affected 0 before 1.39

CWE

CWE-209

References

https://www.ericsson.com/en/about-us/security/psirt/security-bulletin-pcc-july-2026

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.