CVE-2024-25658

Published: Oct 1, 2024Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Exploitability: 3.9 / Impact: 2.5

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Cleartext storage of passwords in Infinera TNMS (Transcend Network Management System) Server 19.10.3 allows attackers (with access to the database or exported configuration files) to obtain SNMP users' usernames and passwords in cleartext.

Affected (1)

Products: Nokia: Transcend Network Management System

Nokia

1 product

Transcend Network Management System

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Nokia Transcend Network Management System	Version 19.10.3

Related CWEs

CWE-312

Cleartext Storage of Sensitive Information

The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

References (1)

https://www.cvcn.gov.it/cvcn/cve/CVE-2024-25658

Source: cve@mitre.org

Third Party Advisory

Timeline

No history available yet.