CVE-2024-25661

7.7 highEPSS 0.1%

High (7.7) in nokia transcend network management system. EPSS 0.1% chance of exploitation in the next 30 days.

In Infinera TNMS (Transcend Network Management System) 19.10.3, cleartext storage of sensitive information in memory of the desktop application TNMS Client allows guest OS administrators to obtain various users' passwords by reading memory dumps of the desktop application.

Severity

CVSS 3.1

7.7 high

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 2% of CVEs (scores of 2026-10-31)
CWE: CWE-312
Published: 2024-10-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

nokia:transcend_network_management_system

References

https://www.cvcn.gov.it/cvcn/cve/CVE-2024-25661

Check your stack JSON