{"id":"CVE-2025-59174","title":"Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability where an attacker sending a large volume of specially crafted messages may cause service degradation.","summary":"Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability where an attacker sending a large volume of specially crafted messages may cause service degradation.","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-228"],"vendor":"ericsson","product":"packet_core_controller","affected":["packet_core_controller < 1.39"],"patched":["packet_core_controller 1.39"],"published":"2026-06-05","updated":"2026-09-30","sourceUpdated":"2026-09-30T21:10:00.190","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-59174","references":[{"url":"https://ericsson.com/en/about-us/security/psirt/CVE-2025-59174","label":"85b1779b-6ecd-4f52-bcc5-73eac4659dcf"}],"tags":["nvd"],"epss":0.00165,"epssPercentile":0.05098,"ingestedAt":"2026-09-30T21:25:07.736Z","slug":"CVE-2025-59174","body":"## Overview\n\nEricsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability where an attacker sending a large volume of specially crafted messages may cause service degradation.\n\n## Affected\n\n- `packet_core_controller < 1.39`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `packet_core_controller 1.39`","depth":"sunlit","depthScore":36,"depthScoreParts":{"impact":35.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}