Nokia Transcend Network Management System vulnerabilities
4 vulnerabilities
Known vulnerabilities in Nokia Transcend Network Management System, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2024-25661nokiatranscend_network_management_system
EPSS score0.13%
In Infinera TNMS (Transcend Network Management System) 19.10.3, cleartext storage of sensitive information in memory of the desktop application TNMS Client allows guest OS administrators to obtain various users' passwords by reading memory dumps of the desktop application.CVE-2024-25659nokiatranscend_network_management_systemEPSS score0.73%
In Infinera TNMS (Transcend Network Management System) 19.10.3, an insecure default configuration of the internal SFTP server on Linux servers allows remote attacker to access files and directories outside the SFTP user home directory.CVE-2024-25660nokiatranscend_network_management_systemEPSS score0.58%
The WebDAV service in Infinera TNMS (Transcend Network Management System) 19.10.3 allows a low-privileged remote attacker to conduct unauthorized file operations, because of execution with unnecessary privileges.CVE-2024-25658nokiatranscend_network_management_systemEPSS score0.18%
Cleartext storage of passwords in Infinera TNMS (Transcend Network Management System) Server 19.10.3 allows attackers (with access to the database or exported configuration files) to obtain SNMP users' usernames and passwords in cleartext.