Read the docs
TI-2025-19896 Aliases CVE-2025-27025GHSA-f553-27vh-gf4h

Improper File Access in Infinera G42

Priority MEDIUM 41CWE-280Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

The target device exposes a service on a specific TCP port with a configured endpoint. The access to that endpoint is granted using a Basic Authentication method. The endpoint accepts also the PUT method and it is possible to write files on the target device file system. Files are written as root. Using Postman it is possible to perform a Directory Traversal attack and write files into any location of the device file system. Similarly to the PUT method, it is possible to leverage the same mechanism to read any file from the file system by using the GET method.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0063 50th percentileScored 2026-11-07
Fix Fixed G42 (Infinera): 7.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
NokiaG426.1.3 to before 7.17.1Patch availableCNA
  • G42 VendorNokia Affected 6.1.3 to before 7.1 Fixed in 7.1 Patch available CNA

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPEVersionsRoleVendor
cpe:2.3:o:nokia:g42_firmware:*:*:*:*:*:*:*:*——Nokia
  • cpe:2.3:o:nokia:g42_firmware:*:*:*:*:*:*:*:* Versions — — ·Nokia

Remediation

  • Fix · CNA G42 (Infinera) Fixed in 7.1

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Infinera G42 7.1

    4 records Highest priority Priority MEDIUM 2 MEDIUM, 2 LOW

    Other records, highest priority first

    • TI-2025-19893 Path Traversal Vulnerability in Infinera G42Priority MEDIUM 40
    • TI-2025-19892 Operating System Misconfiguration in Infinera G42Priority LOW 35
    • TI-2025-19894 Improper Input Validation in Infinera G42Priority LOW 30
    Show all 4 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-27025
  2. 2026-10-03 Alias added: GHSA-f553-27vh-gf4h
  3. 2026-10-27 EPSS moved to the 50th–90th percentile

References

Other 2

  • TI-2022-12519 /SecurityManagement/html/createuser.jsf in Nokia NetAct 22 allows CSRF. CVSS 3.1HIGH 8.8
  • TI-2022-11485 An issue was discovered in Nokia NetAct 22 through the Administration of Measurements… CVSS 3.1HIGH 8.8
  • TI-2022-11484 An issue was discovered in Nokia NetAct 22. CVSS 3.1HIGH 8.8
  • TI-2023-21971 Nokia Service Router Operating System (SR OS) 22.10 and SR Linux, when error-handling… CVSS 3.1HIGH 7.5
  • TI-2022-16599 Nokia Fastmile 3tg00118abad52 devices shipped by Optus are shipped with a default… CVSS 3.1HIGH 8.4
  • TI-2022-22690 Nokia Broadcast Message Center (BMC) before 13.1 allows an unauthenticated remote… CVSS 3.1MEDIUM 6.5
See all 168 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences