What is the CVSS score of EUVD-2025-19698?

EUVD-2025-19698 has a CVSS 3.1 base score of 7.0 (High). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of G42 Firmware are affected by EUVD-2025-19698?

Infinera G42 R6.1.3 contains a sudoers misconfiguration that permits unprivileged users to execute the devmem tool with root privileges without authentication, enabling direct kernel memory…. A patch is available.

How to fix or mitigate EUVD-2025-19698?

Within 24 hours: Inventory all Infinera G42 devices running R6.1.3 and assess network exposure. Within 7 days: Apply vendor patch to upgrade from R6.1.3 to patched version (coordinate with Infinera for specific target version number). Within 30 days: Verify patch deployment across all affected G42 systems and conduct post-remediation testing of sudoers configuration to confirm devmem is no longer executable without authentication.

G42 Firmware EUVD-2025-19698

| CVE-2025-27021 HIGH

Incorrect Privilege Assignment (CWE-266)

2025-07-02 a6d3dc9e-0591-4a13-bce7-0f5b31ff6158

Information Disclosure Denial Of Service G42 Firmware

7.0

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.0 HIGH

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Updated

Apr 16, 2026 - 06:35 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

7.1

EUVD ID Assigned

Mar 16, 2026 - 01:55 euvd

EUVD-2025-19698

Analysis Generated

Mar 16, 2026 - 01:55 vuln.today

CVE Published

Jul 02, 2025 - 09:15 nvd

HIGH 7.0

DescriptionCVE.org

The misconfiguration in the sudoers configuration of the operating system in Infinera G42 version R6.1.3 allows low privileged OS users to read/write physical memory via devmem command line tool. This could allow sensitive information disclosure, denial of service, and privilege escalation by tampering with kernel memory.

Details: The output of "sudo -l" reports the presence of "devmem" command executable as super user without using a password. This command allows to read and write an arbitrary memory area of the target device, specifying an absolute address.

Analysis

Technical ContextAI

Privilege escalation allows a low-privileged user or process to gain elevated permissions beyond what was originally authorized.

RemediationAI

Apply the principle of least privilege. Keep systems patched. Monitor for suspicious privilege changes. Use mandatory access controls (SELinux, AppArmor).