Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability in Configuration Management, allowing an attacker to execute specifically crafted commands to reveal system secret through error messages.
Credits
Spark NZ
Radu Balaci and Meghna Patel from Bell Mobility (Canada)
