CVE-2025-27019

Critical

Published: 08/12/2025(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

Remote shell service (RSH) in Infinera MTC-9 version R22.1.1.0275 allows an attacker to utilize password-less user accounts and obtain system access by activating a reverse shell. This issue affects MTC-9 from R22.1.1.0275 before R23.0.

Risk Assessment

An attacker can gain full system access without authentication, potentially leading to device takeover and data integrity compromise.

Recommendation

Update Infinera MTC-9 to version R23.0 or later. Disable or secure the RSH service if not essential.

Original NVD description (English source)

Remote shell service (RSH) in Infinera MTC-9 version R22.1.1.0275 allows an attacker to utilize password-less user accounts and obtain system access by activating a reverse shell.This issue affects MTC-9: from R22.1.1.0275 before R23.0.