Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling
of Missing Values (CWE-230) vulnerability where an attacker continuously
sending a specially crafted message can cause service degradation. The impact continues as long the attack persists but the system recovers from the crashes when the attack stops.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Ericsson | Packet Core Gateway (PCG) | affected |
|
No data.
No data.
No data.
Project Subscriptions
No data.
No advisories yet.
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
Fri, 05 Jun 2026 11:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of Missing Values (CWE-230) vulnerability where an attacker continuously sending a specially crafted message can cause service degradation. The impact continues as long the attack persists but the system recovers from the crashes when the attack stops. | |
| Title | Ericsson Packet Core Gateway (PCG) - Improper handling of missing values Vulnerability | |
| Weaknesses | CWE-230 | |
| References |
| |
| Metrics |
cvssV4_0
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: ERIC
Published:
Updated: 2026-06-05T11:08:39.929Z
Reserved: 2026-02-04T12:41:54.869Z
Link: CVE-2026-25659
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-06-05T12:16:38.050
Modified: 2026-06-05T12:16:38.050
Link: CVE-2026-25659
Redhat
No data.
OpenCVE Enrichment
No data.