Approved changes feed: RSS · Atom

cpe:2.3:a:nokia:transcend_network_management_system:19.10.3:*:*:*:*:*:*:*

part: a version: 19.10.3 update: *

VendorNokia (817976ae-06c5-5680-b3fe-e55f44d8308a)
ProductTranscend Network Management System (e594bf0b-79ac-58a0-973f-8ff9ea71ac47)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-25661 vulnerable 2026-06-08 06:31:23.703683 Details available
In Infinera TNMS (Transcend Network Management System) 19.10.3, cleartext storage of sensitive information in memory of the desktop application TNMS Client allows guest OS administrators to obtain various users' passwords by reading memory dumps of the desktop application.
Published: 2024-10-01T00:00:00.000Z
Updated: 2024-10-01T15:10:16.501Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25660 vulnerable 2026-06-08 06:31:23.703147 Details available
The WebDAV service in Infinera TNMS (Transcend Network Management System) 19.10.3 allows a low-privileged remote attacker to conduct unauthorized file operations, because of execution with unnecessary privileges.
Published: 2024-10-01T00:00:00.000Z
Updated: 2025-03-25T17:07:55.582Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25659 vulnerable 2026-06-08 06:31:23.702584 Details available
In Infinera TNMS (Transcend Network Management System) 19.10.3, an insecure default configuration of the internal SFTP server on Linux servers allows remote attacker to access files and directories outside the SFTP user home directory.
Published: 2024-10-01T00:00:00.000Z
Updated: 2024-10-01T17:55:47.613Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25658 vulnerable 2026-06-08 06:31:23.700735 Details available
Cleartext storage of passwords in Infinera TNMS (Transcend Network Management System) Server 19.10.3 allows attackers (with access to the database or exported configuration files) to obtain SNMP users' usernames and passwords in cleartext.
Published: 2024-10-01T00:00:00.000Z
Updated: 2024-11-22T19:12:08.359Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.