Skip to content
OpenAdvisories

Vendor

Infinera

11 known vulnerabilities.

Products

G42 6 MTC-9 5
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-26489

    Improper input validation in Netconf service in Infinera MTC-9

    Improper input validation in the Netconf service in Infinera MTC-9 allows remote authenticated users to crash the service and reboot the appliance, thus causing a DoS condition, via crafted XML payloads.This issue affects MTC-9: from R22.1.1.0275 before R23.0.

    Infinera MTC-9
  • Medium 4.9
    CVE-2025-27026

    Improper Access Control Granularity impacting Infinera G42

    A missing double-check feature in the WebGUI for CLI deactivation in Infinera G42 version R6.1.3 allows an authenticated administrator to make other management interfaces unavailable via local and network interfaces. The CLI deactivation via the WebGUI does n…

    Infinera G42
  • Medium 6.5
    CVE-2025-27024

    Improper File Access in Infinera G42

    Unrestricted access to OS file system in SFTP service in Infinera G42 version R6.1.3 allows remote authenticated users to read/write OS files via SFTP connections. Details: Account members of the Network Administrator profile can access the target machine via…

    Infinera G42
  • Medium 6.5
    CVE-2025-27023

    Improper Input Validation in Infinera G42

    Lack or insufficent input validation in WebGUI CLI web in Infinera G42 version R6.1.3 allows remote authenticated users to read all OS files via crafted CLI commands. Details: The web interface based management of the Infinera G42 appliance enables the featur…

    Infinera G42