CVE-2024-25658

—

CVSS 3.1

6.5 medium

EPSS

<1%p8

Published

Oct 1, 2024 (Oct 1, 2024)

Modified

Jun 17, 2026

Description

Cleartext storage of passwords in Infinera TNMS (Transcend Network Management System) Server 19.10.3 allows attackers (with access to the database or exported configuration files) to obtain SNMP users' usernames and passwords in cleartext.

Vendors: nokia
Products: transcend network management system
Weakness: CWE-312
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.