CVE-2025-27024

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Unrestricted access to OS file system in SFTP service in Infinera G42 version R6.1.3 allows remote authenticated users to read/write OS files via SFTP connections.

Details: Account members of the Network Administrator profile can access the target machine via SFTP with the same credentials used for SSH CLI access and are able to read all files according to the OS permission instead of remaining inside the chrooted directory position.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-280

Affected software

No affected versions have been published.

Timeline

Published: Jul 2, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-270258.8The target device exposes a service on a specific TCP port with a configured endpoint. The access to that endpoint is granted using a Basic CVE-2025-270264.9A missing double-check feature in the WebGUI for CLI deactivation in Infinera G42 version R6.1.3 allows an authenticated administrator to m CVE-2025-270274.1A user with vpuser credentials that opens an SSH connection to the device, gets a restricted shell rbash that allows only a small list of al CVE-2025-270286.8The Linux deprivileged user vpuser in Radiflow iSAP Smart Collector (CentOS 7 - VSAP 1.20) can read the entire file system content, includin CVE-2025-270297.5Transient DOS while processing the tone measurement response buffer when the response buffer is out of range.CVE-2025-27036.8The built-in XY Chart plugin is vulnerable to a DOM XSS vulnerability. A user with Editor permissions is able to modify such a panel in or CVE-2025-270306.1information disclosure while invoking calibration data from user space to update firmware size.CVE-2025-270317.8memory corruption while processing IOCTL commands, when the buffer in write loopback mode is accessed after being freed.CVE-2025-270327.8memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency.CVE-2025-270336.1Information disclosure while running video usecase having rogue firmware.CVE-2025-270349.8Memory corruption while selecting the PLMN from SOR failed list.CVE-2025-270366.1Information disclosure when Video engine escape input data is less than expected minimum size.