CVE-2025-27024CWE-280

Improper File Access in Infinera G42

Medium · published July 2, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
31.3
In the wild
Unconfirmed
What it is

Unrestricted access to OS file system in SFTP service in Infinera G42

version R6.1.3 allows remote authenticated users to read/write OS files

via SFTP connections.

Details: Account members of the Network Administrator profile can access the

target machine via SFTP with the same credentials used for SSH CLI

access and are able to read all files according to the OS permission instead of remaining inside the chrooted directory position.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00385 · 31.3th percentile
Weakness
CWE-280 · Improper Handling of Insufficient Permissions or Privileges
Published
2025-07-02T09:38Z
EPSS history
Timeline
  • 02 JUL 09:38Z
    Improper File Access in Infinera G42
    cvelistv5