CVE-2025-27022highCWE-22

CVE-2025-27022: high-severity vulnerability in Infinera G42

Path Traversal Vulnerability in Infinera G42

Published

Follow this CVE+ Monitor G42

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 0.6%
A path traversal vulnerability of the WebGUI HTTP endpoint in Infinera G42 version R6.1.3 allows remote authenticated users to download all OS files via HTTP requests. Details: Lack or insufficient validation of user-supplied input allows authenticated users to access all files on the target machine file system that are readable to the user account used to run the httpd service.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Infinera · G42
Related CVEs — Infinera G42

In the same product, most dangerous first.

CVE-2025-27025HIGHImproper File Access in Infinera G42EPSS 0.6%CVE-2025-27023MEDIUMImproper Input Validation in Infinera G42EPSS 0.5%CVE-2025-27024MEDIUMImproper File Access in Infinera G42EPSS 0.4%CVE-2025-27026MEDIUMImproper Access Control Granularity impacting Infinera G42EPSS 0.4%CVE-2025-27021HIGHOperating System Misconfiguration in Infinera G42EPSS 0.2%