Insufficient Input Validation in Infinera G42 CLI Web Interface

CVE-2025-27023

What is CVE-2025-27023?

The Infinera G42's management interface suffers from insufficient input validation, allowing remote authenticated users to exploit crafted CLI commands. By leveraging this vulnerability, users can inadvertently access sensitive information, including all OS files, through improperly specified commands. This situation arises due to the execution of its HTTP service under a privileged user context, which facilitates unauthorized file viewings. It's essential for users of this appliance to evaluate their systems and ensure that proper input validation measures are in place to mitigate potential risks.

References