CVE-2025-27019: Remote shell service (RSH) in Infinera MTC-9
Remote shell service (RSH) in Infinera MTC-9 version R22.1.1.0275 allows an attacker to utilize password-less user accounts and obtain system access by activating a reverse shell.This issue affects MTC-9: from R22.1.1.0275 before R23.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Infinera MTC-9to a version that resolves this vulnerability.Fixed in R23.0
Event History
Frequently Asked Questions
What is the severity of CVE-2025-27019?
CVE-2025-27019 has a critical severity level due to the potential for unauthorized system access.
How do I fix CVE-2025-27019?
To fix CVE-2025-27019, update Infinera MTC-9 to version R23.0 or later.
What systems are affected by CVE-2025-27019?
CVE-2025-27019 affects Infinera MTC-9 versions from R22.1.1.0275 up to but not including R23.0.
What type of attack does CVE-2025-27019 enable?
CVE-2025-27019 enables an attacker to exploit password-less user accounts for unauthorized access via a reverse shell.
Does CVE-2025-27019 require user interaction to exploit?
Exploitation of CVE-2025-27019 does not require user interaction, making it particularly dangerous.