Infinera G42 WebGUI CLI Deactivation Access Control Vulnerability

A vulnerability in Infinera G42 version R6.1.3 allows authenticated administrators to disable the Command Line Interface (CLI) and other management interfaces, such as the Linux Shell, WebGUI, and Physical Serial Console, without any confirmation. This lack of a double-check feature in the WebGUI for CLI deactivation can lead to a complete loss of control over the device, as the deactivation affects all mentioned interfaces and no confirmation is requested at the time of deactivation.

Impact

Disabling the CLI and other management interfaces can result in a total loss of control over the device, leaving administrators unable to manage or configure the device through standard channels.