CVE-2024-53828 - Vulnerability Details - OpenCVE

Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain a vulnerability where an attacker sending a large volume of specially crafted messages may cause service degradation.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Ericsson	Packet Core Controller

No data.

No data.

References

Link	Providers
https://www.ericsson.com/en/about-us/security/psirt/CVE-2024-53828

History

Thu, 02 Apr 2026 20:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Ericsson Ericsson packet Core Controller
Vendors & Products		Ericsson Ericsson packet Core Controller

Wed, 01 Apr 2026 23:45:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 01 Apr 2026 10:15:00 +0000

Type	Values Removed	Values Added
Description		Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain a vulnerability where an attacker sending a large volume of specially crafted messages may cause service degradation.
Title		Ericsson Packet Core Controller (PCC) - Improper Handling of Syntactically Invalid Structure Vulnerability
Weaknesses		CWE-228
References		https://www.ericsson.com/en/about-us/security/psirt/CVE-2024-53828
Metrics		cvssV3_1 `{'score': 5.3, 'vector': 'CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'}`

MITRE

Status: PUBLISHED

Assigner: ERIC

Published: 2026-04-01T09:49:18.214Z

Updated: 2026-04-01T12:39:41.380Z

Reserved: 2024-11-22T14:21:37.002Z

Link: CVE-2024-53828

Vulnrichment

Updated: 2026-04-01T12:39:23.293Z

NVD

Status : Awaiting Analysis

Published: 2026-04-01T10:16:14.190

Modified: 2026-04-01T14:23:37.727

Link: CVE-2024-53828

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2024-53828", "assignerOrgId": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf", "state": "PUBLISHED", "assignerShortName": "ERIC", "dateReserved": "2024-11-22T14:21:37.002Z", "datePublished": "2026-04-01T09:49:18.214Z", "dateUpdated": "2026-04-01T12:39:41.380Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf", "shortName": "ERIC", "dateUpdated": "2026-04-01T09:49:18.214Z"}, "title": "Ericsson Packet Core Controller (PCC) - Improper Handling of Syntactically Invalid Structure Vulnerability", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-228", "description": "CWE-228", "type": "CWE"}]}], "affected": [{"vendor": "Ericsson", "product": "Packet Core Controller (PCC)", "versions": [{"status": "affected", "version": "0", "lessThan": "1.38", "changes": [{"at": "1.38", "status": "unaffected"}], "versionType": "1.38"}], "defaultStatus": "affected"}], "descriptions": [{"lang": "en", "value": "Ericsson Packet Core Controller (PCC) versions prior\nto 1.38 contain a vulnerability where an attacker sending a large volume of\nspecially crafted messages may cause service degradation.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Ericsson Packet Core Controller (PCC) versions prior\nto 1.38 contain a vulnerability where an attacker sending a large volume of\nspecially crafted messages may cause service degradation."}]}], "references": [{"url": "https://www.ericsson.com/en/about-us/security/psirt/CVE-2024-53828"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "ADJACENT_NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH", "baseSeverity": "MEDIUM", "baseScore": 5.3, "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"}}], "credits": [{"lang": "en", "value": "The UK\u2019s National Cyber Security Centre (NCSC)", "type": "finder"}, {"lang": "en", "value": "The UK Telecoms Lab (UKTL)", "type": "finder"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.1"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-01T12:39:12.844626Z", "id": "CVE-2024-53828", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-01T12:39:41.380Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2024-53828", "assignerOrgId": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf", "state": "PUBLISHED", "assignerShortName": "ERIC", "dateReserved": "2024-11-22T14:21:37.002Z", "datePublished": "2026-04-01T09:49:18.214Z", "dateUpdated": "2026-04-01T12:39:41.380Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf", "shortName": "ERIC", "dateUpdated": "2026-04-01T09:49:18.214Z"}, "title": "Ericsson Packet Core Controller (PCC) - Improper Handling of Syntactically Invalid Structure Vulnerability", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-228", "description": "CWE-228", "type": "CWE"}]}], "affected": [{"vendor": "Ericsson", "product": "Packet Core Controller (PCC)", "versions": [{"status": "affected", "version": "0", "lessThan": "1.38", "changes": [{"at": "1.38", "status": "unaffected"}], "versionType": "1.38"}], "defaultStatus": "affected"}], "descriptions": [{"lang": "en", "value": "Ericsson Packet Core Controller (PCC) versions prior\nto 1.38 contain a vulnerability where an attacker sending a large volume of\nspecially crafted messages may cause service degradation.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Ericsson Packet Core Controller (PCC) versions prior\nto 1.38 contain a vulnerability where an attacker sending a large volume of\nspecially crafted messages may cause service degradation."}]}], "references": [{"url": "https://www.ericsson.com/en/about-us/security/psirt/CVE-2024-53828"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "ADJACENT_NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH", "baseSeverity": "MEDIUM", "baseScore": 5.3, "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"}}], "credits": [{"lang": "en", "value": "The UK\u2019s National Cyber Security Centre (NCSC)", "type": "finder"}, {"lang": "en", "value": "The UK Telecoms Lab (UKTL)", "type": "finder"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.1"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-53828", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-01T12:39:12.844626Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-01T12:39:23.293Z"}}]}}