CVE-2025-59172 Ericsson CVE debrief

Who should care

Administrators and security teams responsible for Ericsson Packet Core Controller (PCC) versions prior to 1.38 should prioritize patching to prevent potential code execution as root. This includes operators managing PCC deployments, platform administrators, and security teams responsible for vulnerability management and incident response.

Technical summary

CVE-2025-59172 is an Improper Neutralization of Special Elements vulnerability in Ericsson Packet Core Controller (PCC) versions prior to 1.38. This HIGH severity vulnerability, with a CVSS score of 8.5, allows an attacker to execute arbitrary code as root. The vulnerability was published on 2026-07-27T15:16:45.017Z. Affected systems should be identified and patched or upgraded to prevent potential exploitation.

Defensive priority

High priority should be given to patching Ericsson Packet Core Controller (PCC) versions prior to 1.38 to prevent potential exploitation. Compensating controls, such as monitoring and exception tracking, should be implemented until patching is complete and verified across all affected systems and deployments.

Recommended defensive actions

• Apply patches or upgrades to Ericsson Packet Core Controller (PCC) versions prior to 1.38.
• Review and update inventory to ensure all affected systems are identified and remediated.
• Implement compensating controls, such as monitoring and exception tracking, until patching is complete.

Evidence notes

The CVE record and NVD entry provide limited information about the vulnerability. Further investigation and verification are necessary to fully understand the scope and impact of CVE-2025-59172. Evidence is limited to CVE and NVD details. Defenders should verify PCC versions, review system configurations, and monitor for potential exploitation attempts.

Official resources