CVEvulnerability
CVE-2024-25658
6.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2024-10-01
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
- Weaknesses
- CWE-312
Description
Cleartext storage of passwords in Infinera TNMS (Transcend Network Management System) Server 19.10.3 allows attackers (with access to the database or exported configuration files) to obtain SNMP users' usernames and passwords in cleartext.
Affected configurations
• nokia transcend network management system 19.10.3
Related
Weakness · CWE (1)
- CWE-312 Cleartext Storage of Sensitive Information weakness
References
- https://www.cvcn.gov.it/cvcn/cve/CVE-2024-25658 Third Party Advisory