Description
An authentication bypass vulnerability exists in
the default SFTP server component utilized across the Ciena products listed. This vulnerability allows a remote, unauthenticated attacker to bypass
security controls and gain unauthorized access to the underlying filesystem.
Successful exploitation could allow an attacker to read or modify system files.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CIENA | 6500 S-Series | R16.96 and prior | — |
| CIENA | 6500 T-Series | R16.1 and prior | — |
| CIENA | PTS | R16.1 and prior | — |
| CIENA | CPL | R12.63 and prior | — |
References
- https://www.ciena.com/product-security vendor-advisory