Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2026-25657
PUBLISHED
More InfoOfficial Page
Assigner-ERIC
Assigner Org ID-85b1779b-6ecd-4f52-bcc5-73eac4659dcf
View Known Exploited Vulnerability (KEV) details
Published At-05 Jun, 2026 | 11:03
Updated At-05 Jun, 2026 | 20:11
Rejected At-
▼CVE Numbering Authority (CNA)
Ericsson Packet Core Gateway (PCG) - Improper Handling of Syntactically Invalid Structure Vulnerability

Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of Syntactically Invalid Structure (CWE-228) vulnerability where an attacker continuously sending a specially crafted message can cause service degradation. The impact continues as long the attack persists but the system recovers from the crashes when the attack stops.

Affected Products
Vendor
EricssonEricsson
Product
Packet Core Gateway (PCG)
Default Status
affected
Versions
Affected
  • From 0 before 1.30 (1.30)
    • -> unaffectedfrom1.30
Problem Types
TypeCWE IDDescription
CWECWE-228CWE-228
Type: CWE
CWE ID: CWE-228
Description: CWE-228
Metrics
VersionBase scoreBase severityVector
4.07.1HIGH
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Version: 4.0
Base score: 7.1
Base severity: HIGH
Vector:
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
finder
Clemens Keil, Manfred Heinz, Patrick Walker of BDO Cyber Security GmbH
finder
BSI 5G/6G Security Lab TEMIS (Federal Office for Information Security, Germany)
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://www.ericsson.com/en/about-us/security/psirt/cve-2026-25657
N/A
Hyperlink: https://www.ericsson.com/en/about-us/security/psirt/cve-2026-25657
Resource: N/A
▼Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
Details not found