CVE-2025-27020

Critical

Published: 08/12/2025(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

Improper configuration of the SSH service in Infinera MTC-9 allows an unauthenticated attacker to execute arbitrary commands and access data on the file system. This issue affects MTC-9 from R22.1.1.0275 before R23.0.

Risk Assessment

An unauthenticated attacker can gain control of the device, execute commands, and access sensitive data, potentially leading to full system compromise.

Recommendation

Update Infinera MTC-9 to version R23.0 or later. Additionally, review and fix the SSH service configuration to prevent unauthorized access.

Original NVD description (English source)

Improper configuration of the SSH service in Infinera MTC-9 allows an unauthenticated attacker to execute arbitrary commands and access data on file system . This issue affects MTC-9: from R22.1.1.0275 before R23.0.