CVE-2024-25661

HIGH

Nokia Transcend Network Management System - Cleartext Storage

Title source: rule

Description

In Infinera TNMS (Transcend Network Management System) 19.10.3, cleartext storage of sensitive information in memory of the desktop application TNMS Client allows guest OS administrators to obtain various users' passwords by reading memory dumps of the desktop application.

References (1)

Core 1

Core References

Third Party Advisory

https://www.cvcn.gov.it/cvcn/cve/CVE-2024-25661

Scores

CVSS v3 7.7

EPSS 0.0013

EPSS Percentile 2.6%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-312

Status published

Products (1)

nokia/transcend_network_management_system 19.10.3

Published Oct 01, 2024

Tracked Since Feb 18, 2026