CVE-2025-59180

Description

Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain a hardcoded credential vulnerability in the alarm system. An attacker with access to the cluster with knowledge of the hardcoded credential can read alarm and alert information.

References

• https://www.ericsson.com/en/about-us/security/psirt/security-bulletin-pcc-july-2026