PatchTheCVEg42 firmware vulnerabilities and fixes
Recent CVEs affecting g42 firmware, with upgrade or downgrade steps. 5 tracked.
Also searched as: g42firmware.
g42 firmware has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2025-07-02. Highest priority: CVE-2025-27022 (score 43/100).
- CVE-2025-27026 MEDIUM 4.9 UPGRADE A missing double-check feature in the WebGUI for CLI deactivation in Infinera G42 version R6.1.3 allows an au
- CVE-2025-27024 MEDIUM 6.5 UPGRADE Unrestricted access to OS file system in SFTP service in Infinera G42 version R6.1.3 allows remote authentica
- CVE-2025-27023 MEDIUM 6.5 UPGRADE Lack or insufficent input validation in WebGUI CLI web in Infinera G42 version R6.1.3 allows remote authentic
- CVE-2025-27022 HIGH 7.5 UPGRADE A path traversal vulnerability of the WebGUI HTTP endpoint in Infinera G42 version R6.1.3 allows remote authe
- CVE-2025-27021 HIGH 7.0 UPGRADE The misconfiguration in the sudoers configuration of the operating system in Infinera G42 version R6.1.3 allo
FAQ
How do I fix g42 firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is g42 firmware being exploited right now?
None of the tracked g42 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which g42 firmware CVE should I patch first?
CVE-2025-27022 currently ranks highest (43/100): A path traversal vulnerability of the WebGUI HTTP endpoint in Infinera G42 version R6.1.3 allows remote authe.