GF
Product
G42 Firmware
5
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 4Low 0
Watch
Add G42 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-27021 | 7.8 | Jul 2 | The misconfiguration in the sudoers configuration of the operating system in Infinera G42 version R6.1.3 allows low privileged OS users to read/write physical memory via devmem… Affected: 6.1.3 before 7.1 |
| CVE-2025-27024 | 6.5 | Jul 2 | Unrestricted access to OS file system in SFTP service in Infinera G42 version R6.1.3 allows remote authenticated users to read/write OS files via SFTP connections Affected: 6.1.3 before 8.0 |
| CVE-2025-27023 | 6.5 | Jul 2 | Lack or insufficent input validation in WebGUI CLI web in Infinera G42 version R6.1.3 allows remote authenticated users to read all OS files via crafted CLI commands Affected: 6.1.3 before 7.1 |
| CVE-2025-27022 | 6.5 | Jul 2 | A path traversal vulnerability of the WebGUI HTTP endpoint in Infinera G42 version R6.1.3 allows remote authenticated users to download all OS files via HTTP requests Affected: 6.1.3 before 7.1 |
| CVE-2025-27026 | 4.9 | Jul 2 | A missing double-check feature in the WebGUI for CLI deactivation in Infinera G42 version R6.1.3 allows an authenticated administrator to make other management interfaces… Affected: 6.1.3 before 8.0 |
Showing 5