CVE-2025-27025: Improper File Access in Infinera G42
The target device exposes a service on a specific TCP port with a configured endpoint. The access to that endpoint is granted using a Basic Authentication method. The endpoint accepts also the PUT method and it is possible to write files on the target device file system. Files are written as root. Using Postman it is possible to perform a Directory Traversal attack and write files into any location of the device file system. Similarly to the PUT method, it is possible to leverage the same mechanism to read any file from the file system by using the GET method.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-27025?
CVE-2025-27025 is considered to have a high severity due to its potential for unauthorized access and file manipulation on the affected device.
How do I fix CVE-2025-27025?
To mitigate CVE-2025-27025, it is recommended to disable the Basic Authentication for the affected endpoint or restrict access to trusted IP addresses only.
Which devices are affected by CVE-2025-27025?
CVE-2025-27025 specifically affects Infinera G42 devices that expose a vulnerable service on a specific TCP port.
What type of attack can exploit CVE-2025-27025?
CVE-2025-27025 can be exploited by an attacker to perform unauthorized file uploads and potentially take control of the system.
Is CVE-2025-27025 a zero-day vulnerability?
CVE-2025-27025 is not classified as a zero-day vulnerability, but it is critical to address it promptly to prevent exploitation.