Nokia Transcend Network Management System vulnerabilities

4 CVEs affecting Nokia Transcend Network Management System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-25660, published 2024-10-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-25659, published 2024-10-01. High severity, CVSS 7.2. EPSS: 0.7% chance of exploitation in the next 30 days. In Infinera TNMS (Transcend Network Management System) 19.10.3, an insecure default configuration of the internal SFTP server on Linux servers allows remote attacker to access files and directories…
CVE-2024-25660, published 2024-10-01. Critical severity, CVSS 9.0. EPSS: 0.6% chance of exploitation in the next 30 days. The WebDAV service in Infinera TNMS (Transcend Network Management System) 19.10.3 allows a low-privileged remote attacker to conduct unauthorized file operations, because of execution with…
CVE-2024-25658, published 2024-10-01. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. Cleartext storage of passwords in Infinera TNMS (Transcend Network Management System) Server 19.10.3 allows attackers (with access to the database or exported configuration files) to obtain SNMP…
CVE-2024-25661, published 2024-10-01. High severity, CVSS 7.7. EPSS: 0.1% chance of exploitation in the next 30 days. In Infinera TNMS (Transcend Network Management System) 19.10.3, cleartext storage of sensitive information in memory of the desktop application TNMS Client allows guest OS administrators to obtain…