CVE-2025-27021: The misconfiguration in the sudoers configuration of the operating system in Infinera G42 version R6.1.3 allows low privileged OS users to read/write physical…

PriorityP343high7.8CVSS 3.1

AVLACLPRLUINSUCHIHAH

EPSS

0.13%

3.2th percentile

The misconfiguration in the sudoers configuration of the operating system in Infinera G42 version R6.1.3 allows low privileged OS users to read/write physical memory via devmem command line tool. This could allow sensitive information disclosure, denial of service, and privilege escalation by tampering with kernel memory. Details: The output of "sudo -l" reports the presence of "devmem" command executable as super user without using a password. This command allows to read and write an arbitrary memory area of the target device, specifying an absolute address.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
infinera	g42	>= 6.1.3 < 7.1	7.1
nokia	g42_firmware	>= 6.1.3 < 7.1	7.1

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.