Transcend Network Management System

transcend_network_management_system

Vendor: Nokia • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-25660 1Nokia 1Transcend Network Management System Jun 17, 2026 Oct 1, 2024 N/A· v4 9.0 CRITICAL· v3 N/A· v2 The WebDAV service in Infinera TNMS (Transcend Network Management System) 19.10.3 allows a low-privileged remote attacker to conduct unauthorized file operations, because of execution with unnecessary privileges.
CVE-2024-25659 1Nokia 1Transcend Network Management System Jun 17, 2026 Oct 1, 2024 N/A· v4 7.2 HIGH· v3 N/A· v2 In Infinera TNMS (Transcend Network Management System) 19.10.3, an insecure default configuration of the internal SFTP server on Linux servers allows remote attacker to access files and directories outside the SFTP user...Show more In Infinera TNMS (Transcend Network Management System) 19.10.3, an insecure default configuration of the internal SFTP server on Linux servers allows remote attacker to access files and directories outside the SFTP user home directory.Show less
CVE-2024-25661 1Nokia 1Transcend Network Management System Jun 17, 2026 Oct 1, 2024 N/A· v4 7.7 HIGH· v3 N/A· v2 In Infinera TNMS (Transcend Network Management System) 19.10.3, cleartext storage of sensitive information in memory of the desktop application TNMS Client allows guest OS administrators to obtain various users' password...Show more In Infinera TNMS (Transcend Network Management System) 19.10.3, cleartext storage of sensitive information in memory of the desktop application TNMS Client allows guest OS administrators to obtain various users' passwords by reading memory dumps of the desktop application.Show less
CVE-2024-25658 1Nokia 1Transcend Network Management System Jun 17, 2026 Oct 1, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Cleartext storage of passwords in Infinera TNMS (Transcend Network Management System) Server 19.10.3 allows attackers (with access to the database or exported configuration files) to obtain SNMP users' usernames and pass...Show more Cleartext storage of passwords in Infinera TNMS (Transcend Network Management System) Server 19.10.3 allows attackers (with access to the database or exported configuration files) to obtain SNMP users' usernames and passwords in cleartext.Show less