CVE-2025-59177 MEDIUM

CVE-2025-59177: Generation of Error Message Containing Sensitive Information Vulnerability

Vendor Ericsson

Product Ericsson Packet Core Controller (PCC)

Weakness CWE-209 · Error message info leak

Published July 27, 2026

Last update July 27, 2026

View on NVD All CVEs

CVSS base score

6.8/10

Attack vector Adjacent

Attack complexity Low

Privileges required High

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability in Configuration Management, allowing an attacker to execute specifically crafted commands to reveal system secret through error messages.

Key dates

02Disclosure timeline

July 27, 2026 CVE published

July 27, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-59177 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/209.html AskarLabs — CWE-209 write-up Generation of Error Message Containing Sensitive Information

Related vulnerabilities

CVE-2025-59177: Generation of Error Message Containing Sensitive Information Vulnerability

01Description

02Disclosure timeline

03References

04Related CVE