Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Infinera G42 7.1 Clear all filters
TI-2025-19896 CVE-2025-27025 · GHSA-f553-27vh-gf4h

Improper File Access in Infinera G42

Priority MEDIUM 41

The target device exposes a service on a specific TCP port with a configured endpoint.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0063 Published 2025-07-02 Fixed in 7.1 CWE-280
TI-2025-19894 CVE-2025-27023 · GHSA-34v7-fvgc-mxc2

Improper Input Validation in Infinera G42

Priority LOW 30

Lack or insufficent input validation in WebGUI CLI web in Infinera G42 version R6.1.3 allows remote authenticated users to read all OS files via crafted CLI commands.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00547 Published 2025-07-02 Fixed in 7.1 CWE-20
TI-2025-19893 CVE-2025-27022 · GHSA-g7cx-36jq-75p8

Path Traversal Vulnerability in Infinera G42

Priority MEDIUM 40

A path traversal vulnerability of the WebGUI HTTP endpoint in Infinera G42 version R6.1.3 allows remote authenticated users to download all OS files via HTTP requests.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00604 Published 2025-07-02 Fixed in 7.1 CWE-22
TI-2025-19892 CVE-2025-27021 · GHSA-9w8q-pjh8-6h83

Operating System Misconfiguration in Infinera G42

Priority LOW 35

The misconfiguration in the sudoers configuration of the operating system in Infinera G42 version R6.1.3 allows low privileged OS users to read/write physical memory via devmem command line tool.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00155 Published 2025-07-02 Fixed in 7.1 CWE-266