Description (CNA)
An authentication bypass vulnerability exists in the default SFTP server component utilized across the Ciena products listed. This vulnerability allows a remote, unauthenticated attacker to bypass security controls and gain unauthorized access to the underlying filesystem. Successful exploitation could allow an attacker to read or modify system files.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| CIENA / 6500 S-Series | affected R16.96 and prior |
| CIENA / 6500 T-Series | affected R16.1 and prior |
| CIENA / PTS | affected R16.1 and prior |
| CIENA / CPL | affected R12.63 and prior |
CWE
CWE-288
References
ADP enrichment
No English description supplied.
No references supplied.