CVE-2025-27021: falha de alta gravidade em Infinera G42
Operating System Misconfiguration in Infinera G42
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7epss 0.2%
The misconfiguration in the sudoers configuration of the operating system in
Infinera G42 version R6.1.3 allows low privileged OS users to
read/write physical memory via devmem command line tool.
This could
allow sensitive information disclosure, denial of service, and privilege
escalation by tampering with kernel memory.
Details: The output of "sudo -l" reports the presence of "devmem" command
executable as super user without using a password. This command allows
to read and write an arbitrary memory area of the target device,
specifying an absolute address.
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Infinera · G42CVEs relacionadas — Infinera G42
No mesmo produto, das mais perigosas para as menos.
CVE-2025-27025HIGHImproper File Access in Infinera G42EPSS 0.6%CVE-2025-27022HIGHPath Traversal Vulnerability in Infinera G42EPSS 0.6%CVE-2025-27023MEDIUMImproper Input Validation in Infinera G42EPSS 0.5%CVE-2025-27024MEDIUMImproper File Access in Infinera G42EPSS 0.4%CVE-2025-27026MEDIUMImproper Access Control Granularity impacting Infinera G42EPSS 0.4%