This vulnerability in Ericsson Packet Core Gateway (PCG) arises from improper handling of missing values (CWE-230). An unauthenticated attacker can repeatedly send crafted messages to degrade service availability. The vulnerability affects versions prior to 1.30. The system experiences service degradation during the attack but recovers after the attack ceases. The CVSS 4.0 score is 7.1, reflecting high severity with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on availability. No official patch or remediation level has been disclosed by Ericsson as of the publication date.

The vulnerability causes service degradation in the affected Ericsson PCG systems while under attack. The system crashes or performance is impaired during continuous exploitation but recovers automatically once the attack stops. There is no indication of data confidentiality or integrity impact. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, organizations should monitor for unusual traffic patterns targeting the PCG and consider implementing network-level protections to limit exposure. No vendor-provided mitigation or temporary fix is currently documented.