ericsson Packet Core Controller vulnerabilities

Latest ericsson Packet Core Controller CVEs

Newest publication first

1. CVE-2025-59174 Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability where an attacker sending a large volume of specially crafted messages may cause service degradation.

   Published 2026-06-05

   High·CVSS 7.1 EPSS 0.17%

   Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability where an attacker sending a large volume of specially crafted messages may cause service degradation.

2. CVE-2024-53828 Ericsson Packet Core Controller (PCC) - Improper Handling of Syntactically Invalid Structure Vulnerability

   Published 2026-04-01

   Medium·CVSS 5.3 EPSS 0.38%

   Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain a vulnerability where an attacker sending a large volume of specially crafted messages may cause service degradation.

3. CVE-2024-53827 Ericsson Packet Core Controller (PCC) - Improper Input Validation Vulnerability

   Published 2025-05-16

   High·CVSS 7.5 EPSS 0.43%

   Ericsson Packet Core Controller (PCC) contains a vulnerability where an attacker sending a large volume of specially crafted messages may cause service degradation

4. CVE-2024-25009 Ericsson Packet Core Controller (PCC) - Improper Input Validation Vulnerability

   Published 2024-08-20

   Medium·CVSS 6.5 EPSS 0.27%

   Ericsson Packet Core Controller (PCC) contains a vulnerability in Access and Mobility Management Function (AMF) where improper input validation can lead to denial of service which may result in service degradation.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.