Approved changes feed: RSS · Atom
cpe:2.3:a:infinera:mtc-9:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Infinera (98987c95-fb97-5b42-9d06-bec13185484a) |
|---|---|
| Product | Mtc 9 (c860da9a-c930-594a-89c2-7adb4453bf1b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-27020 |
vulnerable | 2026-06-08 07:14:50.834161 |
Improper configuration of SSH service in Infinera MTC-9
CRITICAL (9.8)
Improper configuration of the SSH service in Infinera MTC-9 allows an unauthenticated attacker to execute arbitrary commands and access data on file system
.
This issue affects MTC-9: from R22.1.1.0275 before R23.0.
Published: 2025-12-08T09:26:27.103Z
Updated: 2025-12-08T17:26:10.346Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-27019 |
vulnerable | 2026-06-08 07:14:50.831758 |
Remote shell service (RSH) in Infinera MTC-9
CRITICAL (9.8)
Remote shell service (RSH) in Infinera MTC-9 version R22.1.1.0275 allows
an attacker to utilize password-less user accounts and obtain
system access by activating a reverse shell.This issue affects MTC-9: from R22.1.1.0275 before R23.0.
Published: 2025-12-08T09:22:19.072Z
Updated: 2025-12-08T17:27:47.739Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26489 |
vulnerable | 2026-06-08 07:12:51.966266 |
Improper input validation in Netconf service in Infinera MTC-9
MEDIUM (6.5)
Improper input validation in the Netconf service in Infinera MTC-9 allows remote authenticated users to crash the service and
reboot the appliance, thus causing a DoS condition, via crafted XML
payloads.This issue affects MTC-9: from R22.1.1.0275 before R23.0.
Published: 2025-12-08T08:56:12.337Z
Updated: 2025-12-08T17:36:40.268Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26488 |
vulnerable | 2026-06-08 07:12:51.965753 |
Improper input validation in XML Management service in Infinera MTC-9
HIGH (7.5)
Improper Input Validation vulnerability in Infinera MTC-9 allows remote unauthenticated users to crash the service and cause a
reboot of the appliance, thus causing a DoS condition, via crafted XML
payloads.This issue affects MTC-9: from R22.1.1.0275 before R23.0.
Published: 2025-12-08T08:52:47.530Z
Updated: 2025-12-08T17:43:30.306Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26487 |
vulnerable | 2026-06-08 07:12:51.964141 |
Server Side Request Forgery (SSRF) in the web server of Infinera MTC-9
HIGH (8.6)
Server-Side Request Forgery (SSRF) vulnerability in Infinera MTC-9 version allows
remote unauthenticated users to gain access to other network resources
using HTTPS requests through the appliance used as a bridge.
Published: 2025-12-08T08:44:34.754Z
Updated: 2025-12-08T17:46:01.623Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.