Ericsson Packet Core Controller (PCC) versions before 1.38 contain a vulnerability classified as CWE-228, where an attacker can cause service degradation by sending a high volume of specially crafted messages. The CVSS 3.1 base score is 5.3, reflecting a medium severity with attack vector as adjacent network, high attack complexity, no privileges required, no user interaction, and impact limited to availability. There is no evidence of confidentiality or integrity compromise. No patch or vendor advisory information is available to confirm remediation status.

The vulnerability can lead to service degradation impacting availability of the Ericsson PCC, potentially disrupting network services relying on this component. There is no impact on confidentiality or integrity. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider limiting exposure of the PCC to untrusted adjacent networks and monitoring for abnormal message volumes that could indicate attempted exploitation.