Description
An authentication bypass vulnerability exists in the default SFTP server component utilized across the Ciena products listed. This vulnerability allows a remote, unauthenticated attacker to bypass security controls and gain unauthorized access to the underlying filesystem. Successful exploitation could allow an attacker to read or modify system files.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
CIENA 6500 S-Series
Default version status: unaffected
R16.96 and prioraffected
CIENA 6500 T-Series
Default version status: unaffected
R16.1 and prioraffected
CIENA PTS
Default version status: unaffected
R16.1 and prioraffected
CIENA CPL
Default version status: unaffected
R12.63 and prioraffected