VULNERABILITY INTELLIGENCE

CVE-2024-25659

CVSS score7.2 HIGH
EPSS probability0.73%
CISA KEVNot currently listed
Published2024-10-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

In Infinera TNMS (Transcend Network Management System) 19.10.3, an insecure default configuration of the internal SFTP server on Linux servers allows remote attacker to access files and directories outside the SFTP user home directory.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-22

Primary references