Approved changes feed: RSS · Atom

cpe:2.3:h:nokia:infinera_mtc-9:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorNokia (817976ae-06c5-5680-b3fe-e55f44d8308a)
ProductInfinera Mtc 9 (88336772-aa5c-50f4-8a5f-56e67b714ab6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-27020 not_vulnerable 2026-06-08 07:14:50.834229 Improper configuration of SSH service in Infinera MTC-9
CRITICAL (9.8)
Improper configuration of the SSH service in Infinera MTC-9 allows an unauthenticated attacker to execute arbitrary commands and access data on file system . This issue affects MTC-9: from R22.1.1.0275 before R23.0.
Published: 2025-12-08T09:26:27.103Z
Updated: 2025-12-08T17:26:10.346Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27019 not_vulnerable 2026-06-08 07:14:50.833703 Remote shell service (RSH) in Infinera MTC-9
CRITICAL (9.8)
Remote shell service (RSH) in Infinera MTC-9 version R22.1.1.0275 allows an attacker to utilize password-less user accounts and obtain system access by activating a reverse shell.This issue affects MTC-9: from R22.1.1.0275 before R23.0.
Published: 2025-12-08T09:22:19.072Z
Updated: 2025-12-08T17:27:47.739Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26489 not_vulnerable 2026-06-08 07:12:51.966322 Improper input validation in Netconf service in Infinera MTC-9
MEDIUM (6.5)
Improper input validation in the Netconf service in Infinera MTC-9 allows remote authenticated users to crash the service and reboot the appliance, thus causing a DoS condition, via crafted XML payloads.This issue affects MTC-9: from R22.1.1.0275 before R23.0.
Published: 2025-12-08T08:56:12.337Z
Updated: 2025-12-08T17:36:40.268Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26488 not_vulnerable 2026-06-08 07:12:51.965815 Improper input validation in XML Management service in Infinera MTC-9
HIGH (7.5)
Improper Input Validation vulnerability in Infinera MTC-9 allows remote unauthenticated users to crash the service and cause a reboot of the appliance, thus causing a DoS condition, via crafted XML payloads.This issue affects MTC-9: from R22.1.1.0275 before R23.0.
Published: 2025-12-08T08:52:47.530Z
Updated: 2025-12-08T17:43:30.306Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26487 not_vulnerable 2026-06-08 07:12:51.965406 Server Side Request Forgery (SSRF) in the web server of Infinera MTC-9
HIGH (8.6)
Server-Side Request Forgery (SSRF) vulnerability in Infinera MTC-9 version allows remote unauthenticated users to gain access to other network resources using HTTPS requests through the appliance used as a bridge.
Published: 2025-12-08T08:44:34.754Z
Updated: 2025-12-08T17:46:01.623Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.