Improper SSH Service Configuration in Infinera MTC-9
CVE-2025-27020

9.8CRITICAL

Key Information:

Vendor

Infinera

Status
Mtc-9
Vendor
CVE Published:
8 December 2025

What is CVE-2025-27020?

The Infinera MTC-9 device suffers from an improper configuration of its SSH service, exposing it to a significant risk. This vulnerability allows unauthenticated attackers to execute arbitrary commands and potentially access sensitive data on the device's file system. The issue is present in MTC-9 versions from R22.1.1.0275 before R23.0, highlighting the importance of ensuring proper security configurations to mitigate unauthorized access risks.

Affected Version(s)

MTC-9 R22.1.1.0275

References

https://www.cvcn.gov.it/cvcn/cve/CVE-2025-27020
government-resource

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-27020 : Improper SSH Service Configuration in Infinera MTC-9