CVE-2026-25658

{
  "id": "CVE-2026-25658",
  "sourceIdentifier": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf",
  "published": "2026-06-05T12:16:37.907",
  "lastModified": "2026-10-26T11:10:00.157",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Ericsson\nPacket Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling\nof Missing Values (CWE-230) vulnerability where an attacker continuously\nsending a specially crafted message can cause service degradation. The impact continues as long the attack persists but the system recovers from the crashes when the attack stops."
    },
    {
      "lang": "es",
      "value": "Ericsson\nLas versiones de Packet Core Gateway (PCG) anteriores a la 1.30 contienen una vulnerabilidad de Manejo Inadecuado de Valores Faltantes (CWE-230) donde un atacante que envía continuamente un mensaje especialmente diseñado puede causar degradación del servicio. El impacto continúa mientras el ataque persista, pero el sistema se recupera de los fallos cuando el ataque se detiene."
    }
  ],
  "affected": [
    {
      "source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf",
      "affectedData": [
        {
          "vendor": "Ericsson",
          "product": "Packet Core Gateway (PCG)",
          "defaultStatus": "affected",
          "versions": [
            {
              "version": "0",
              "lessThan": "1.30",
              "versionType": "1.30",
              "status": "affected",
              "changes": [
                {
                  "at": "1.30",
                  "status": "unaffected"
                }
              ]
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV40": [
      {
        "source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf",
        "type": "Secondary",
        "cvssData": {
          "version": "4.0",
          "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "baseScore": 7.1,
          "baseSeverity": "HIGH",
          "attackVector": "ADJACENT",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "vulnConfidentialityImpact": "NONE",
          "vulnIntegrityImpact": "NONE",
          "vulnAvailabilityImpact": "HIGH",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "subAvailabilityImpact": "NONE",
          "exploitMaturity": "NOT_DEFINED",
          "confidentialityRequirement": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "valueDensity": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "NOT_DEFINED",
          "providerUrgency": "NOT_DEFINED"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Primary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "baseScore": 6.5,
          "baseSeverity": "MEDIUM",
          "attackVector": "ADJACENT_NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-06-05T20:11:36.044286Z",
          "id": "CVE-2026-25658",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-230"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:ericsson:packet_core_gateway:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "1.30",
              "matchCriteriaId": "A22CA693-31C9-4C56-B9F8-DF577769D499"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.ericsson.com/en/about-us/security/psirt/cve-2026-25658",
      "source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf",
      "tags": [
        "Vendor Advisory"
      ]
    }
  ]
}