CVE-2025-59174

Analyzed Analyzed - Analysis Complete

Ericsson Packet Core Controller Service Degradation Vulnerability

Publication date: 2026-06-05

Last updated on: 2026-06-08

Assigner: Ericsson

Description

Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability where an attacker sending a large volume of specially crafted messages may cause service degradation.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-05

Last Modified

2026-06-08

Generated

2026-07-16

AI Q&A

2026-06-05

EPSS Evaluated

2026-07-14

NVD

CVE-2025-59174

EUVD

EUVD-2025-210074

Affected Vendors & Products

Vendor	Product	Version / Range
ericsson	packet_core_controller	to 1.39 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-228	The product does not handle or incorrectly handles input that is not syntactically well-formed with respect to the associated specification.

Attack-Flow Graph

Executive Summary

The vulnerability exists in Ericsson Packet Core Controller (PCC) versions prior to 1.39. An attacker can exploit this by sending a large volume of specially crafted messages, which may cause service degradation.

Impact Analysis

This vulnerability can lead to service degradation in the Ericsson Packet Core Controller, potentially disrupting network services that rely on this component.

Mitigation Strategies

To mitigate this vulnerability, you should apply the update released by Ericsson for the Packet Core Controller (PCC) as described in their security bulletin.

Hi! I’m here to help you understand CVE-2025-59174. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70