PT-2025-49542 · Infinera · Infinera Mtc-9

Published 2025-12-08 · Updated 2025-12-22 · CVE-2025-27020

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Infinera MTC-9 versions R22.1.1.0275 through R22.9.9

Description An improper configuration of the SSH service in Infinera MTC-9 can allow an unauthenticated attacker to execute arbitrary commands and access data on the file system. The issue allows for unauthorized command execution due to the misconfigured SSH service.

Recommendations Upgrade to version R23.0 or later. Restrict SSH access until the system is updated.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2025-27020

Affected Products

Infinera Mtc-9

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-27020 · Security Note
• https://osv.dev/vulnerability/CVE-2025-27020 · Vendor Advisory
• https://twitter.com/offseq/status/1997970339721007603 · Twitter Post
• https://t.me/cveNotify/145094 · Telegram Post
• https://t.me/cveNotify/146573 · Telegram Post
• https://cvcn.gov.it/cvcn/cve/CVE-2025-27020 · Note
• https://t.me/CVEtracker/39112 · Telegram Post
• https://twitter.com/CVEnew/status/1997974341519278169 · Twitter Post
• https://twitter.com/CveFindCom/status/1997979288029614132 · Twitter Post