PT-2025-49536 · Infinera · Infinera Mtc-9
CVE-2025-26488
·
Publicado
2025-12-08
·
Atualizado
2025-12-22
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Infinera MTC-9 versions R22.1.1.0275 through R23.0
Description
A flaw exists in input validation within Infinera MTC-9 that enables remote, unauthenticated attackers to disrupt service and trigger a reboot of the appliance, leading to a denial-of-service (DoS) condition. This is achieved by submitting specially crafted XML payloads. The vulnerable component does not properly sanitize input, allowing malicious data to cause a crash.
Recommendations
Versions prior to R23.0 should be updated.
Correção
DoS
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Infinera Mtc-9