CVE-2024-25661

HIGH

Nokia Transcend Network Management System - Cleartext Storage

Title source: rule

Description

In Infinera TNMS (Transcend Network Management System) 19.10.3, cleartext storage of sensitive information in memory of the desktop application TNMS Client allows guest OS administrators to obtain various users' passwords by reading memory dumps of the desktop application.

References (1)

[Third Party Advisory] https://www.cvcn.gov.it/cvcn/cve/CVE-2024-25661

Scores

CVSS v3 7.7

EPSS 0.0004

EPSS Percentile 13.2%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-312

Status published

Products (1)

nokia/transcend_network_management_system 19.10.3

Published Oct 01, 2024

Tracked Since Feb 18, 2026