CVE-2024-25659

7.2 highEPSS 0.7%

High (7.2) in nokia transcend network management system. EPSS 0.7% chance of exploitation in the next 30 days.

In Infinera TNMS (Transcend Network Management System) 19.10.3, an insecure default configuration of the internal SFTP server on Linux servers allows remote attacker to access files and directories outside the SFTP user home directory.

Severity

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2024-10-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

nokia:transcend_network_management_system

References

https://www.cvcn.gov.it/cvcn/cve/CVE-2024-25659

Check your stack JSON