CVE-2024-25661

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-25661
In Infinera TNMS (Transcend Network Management System) 19.10.3, cleartext storage of sensitive information in memory of the desktop application TNMS Client allows guest OS administrators to obtain various users' passwords by reading memory dumps of the desktop application.

7.7 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.1 / Impact : 6.0

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References
Link Resource
https://www.cvcn.gov.it/cvcn/cve/CVE-2024-25661 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:nokia:transcend_network_management_system:19.10.3:*:*:*:*:*:*:*
History

10 Jul 2025, 21:02

Type Values Removed Values Added
References () https://www.cvcn.gov.it/cvcn/cve/CVE-2024-25661 - () https://www.cvcn.gov.it/cvcn/cve/CVE-2024-25661 - Third Party Advisory
First Time Nokia transcend Network Management System
Nokia
CPE cpe:2.3:a:nokia:transcend_network_management_system:19.10.3:*:*:*:*:*:*:*
Information

Published : 2024-10-01 15:15

Updated : 2025-07-10 21:02

NVD link : CVE-2024-25661

Mitre link : CVE-2024-25661

CVE.ORG link : CVE-2024-25661

JSON object : View

Products Affected

nokia

  • transcend_network_management_system
CWE
CWE-312

Cleartext Storage of Sensitive Information