VULNERABILITY INTELLIGENCE
CVE-2024-25658
CVSS score6.5 MEDIUM
EPSS probability0.18%
CISA KEVNot currently listed
Published2024-10-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Description
Cleartext storage of passwords in Infinera TNMS (Transcend Network Management System) Server 19.10.3 allows attackers (with access to the database or exported configuration files) to obtain SNMP users' usernames and passwords in cleartext.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-312
Primary references
- cve@mitre.org — Third Party Advisory