Critical · published December 8, 2025
🚨 An unauthenticated attacker can execute arbitrary commands, like a rogue chef taking over the kitchen without a reservation. 🔥 Picture a restaurant where anyone can waltz in and start cooking — that’s the kind of access this vulnerability offers. The SSH service configuration in Infinera MTC-9 allows unauthorized users to access sensitive files and execute commands as if they were trusted staff. This could lead to absolutely devastating consequences: attackers could manipulate data, install malware, or even compromise the entire system. Imagine someone rearranging all the orders, causing chaos and confusion! The potential fallout is staggering, especially for systems relying on MTC-9.
Picture a restaurant where anyone can waltz in and start cooking — that’s the kind of access this vulnerability offers. The SSH service configuration in Infinera MTC-9 allows unauthorized users to access sensitive files and execute commands as if they were trusted staff. The vulnerability arises from improper configuration of the SSH service, which allows unauthenticated users to run arbitrary commands on the file system without any restrictions. This presents a significant security risk for affected versions of Infinera MTC-9, specifically those before R23.0.
This could lead to absolutely devastating consequences: attackers could manipulate data, install malware, or even compromise the entire system. Imagine someone rearranging all the orders, causing chaos and confusion! The potential fallout is staggering, especially for systems relying on MTC-9. Immediate action is required! Patch your systems to version R23.0 or later to close this door to attackers. Additionally, review your SSH service configurations to ensure they’re locked down tight and only accessible to authenticated users. You’ve got this! Follow these steps to safeguard your systems and restore peace in your digital kitchen! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| nokia/infinera_mtc-9_firmware | ≥ 22.1.1.0275, < 23.0 | 23.0 |