CVE-2024-25658

MEDIUM

Nokia Transcend Network Management System - Cleartext Storage

Title source: rule

Description

Cleartext storage of passwords in Infinera TNMS (Transcend Network Management System) Server 19.10.3 allows attackers (with access to the database or exported configuration files) to obtain SNMP users' usernames and passwords in cleartext.

References (1)

[Third Party Advisory] https://www.cvcn.gov.it/cvcn/cve/CVE-2024-25658

Scores

CVSS v3 6.5

EPSS 0.0016

EPSS Percentile 36.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-312

Status published

Products (1)

nokia/transcend_network_management_system 19.10.3

Published Oct 01, 2024

Tracked Since Feb 18, 2026