CVE-2024-25658

6.5 mediumEPSS 0.2%

Medium (6.5) in nokia transcend network management system. EPSS 0.2% chance of exploitation in the next 30 days.

Cleartext storage of passwords in Infinera TNMS (Transcend Network Management System) Server 19.10.3 allows attackers (with access to the database or exported configuration files) to obtain SNMP users' usernames and passwords in cleartext.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 8% of CVEs (scores of 2026-10-31)
CWE: CWE-312
Published: 2024-10-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

nokia:transcend_network_management_system

References

https://www.cvcn.gov.it/cvcn/cve/CVE-2024-25658

Check your stack JSON