CVEvulnerability

CVE-2025-59178

4.8 MEDIUM Published 2026-07-27 Modified 2026-09-29 Official page ↗
Status
Deferred
Published
2026-07-27
Last modified
2026-09-29
Assigner
85b1779b-6ecd-4f52-bcc5-73eac4659dcf
CVSS 4.0 (85b1779b-6ecd-4f52-bcc5-73eac4659dcf)
4.8 MEDIUM — CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weaknesses
CWE-497

Description

Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain an Exposure of Sensitive System Information vulnerability in Configuration Management allowing an attacker to enumerate other users on the system.

Related

Weakness · CWE (1)

  • CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere weakness

References