Infinera MTC 9 vulnerabilities
5 vulnerabilities
Known vulnerabilities in Infinera MTC 9, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-26489infineramtc-9+1
EPSS score0.33%
Improper input validation in the Netconf service in Infinera MTC-9 allows remote authenticated users to crash the service and
reboot the appliance, thus causing a DoS condition, via crafted XML
payloads.This issue affects MTC-9: from R22.1.1.0275 before R23.0.CVE-2025-26487infineramtc-9+1EPSS score0.35%
Server-Side Request Forgery (SSRF) vulnerability in Infinera MTC-9 version allows
remote unauthenticated users to gain access to other network resources
using HTTPS requests through the appliance used as a bridge.CVE-2025-26488infineramtc-9+1EPSS score0.38%
Improper Input Validation vulnerability in Infinera MTC-9 allows remote unauthenticated users to crash the service and cause a
reboot of the appliance, thus causing a DoS condition, via crafted XML
payloads.This issue affects MTC-9: from R22.1.1.0275 before R23.0.CVE-2025-27020infineramtc-9+1EPSS score0.50%
Improper configuration of the SSH service in Infinera MTC-9 allows an unauthenticated attacker to execute arbitrary commands and access data on file system
.
This issue affects MTC-9: from R22.1.1.0275 before R23.0.CVE-2025-27019infineramtc-9+1EPSS score0.43%
Remote shell service (RSH) in Infinera MTC-9 version R22.1.1.0275 allows
an attacker to utilize password-less user accounts and obtain
system access by activating a reverse shell.This issue affects MTC-9: from R22.1.1.0275 before R23.0.