Approved changes feed: RSS · Atom

cpe:2.3:a:infinera:tnms:19.10.3:*:*:*:*:*:*:*

part: a version: 19.10.3 update: *

VendorInfinera (98987c95-fb97-5b42-9d06-bec13185484a)
ProductTnms (650723e0-709c-54c4-bd04-2495baf3fd2e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-25661 vulnerable 2026-06-08 06:31:23.703579 Details available
In Infinera TNMS (Transcend Network Management System) 19.10.3, cleartext storage of sensitive information in memory of the desktop application TNMS Client allows guest OS administrators to obtain various users' passwords by reading memory dumps of the desktop application.
Published: 2024-10-01T00:00:00.000Z
Updated: 2024-10-01T15:10:16.501Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25660 vulnerable 2026-06-08 06:31:23.703036 Details available
The WebDAV service in Infinera TNMS (Transcend Network Management System) 19.10.3 allows a low-privileged remote attacker to conduct unauthorized file operations, because of execution with unnecessary privileges.
Published: 2024-10-01T00:00:00.000Z
Updated: 2025-03-25T17:07:55.582Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25659 vulnerable 2026-06-08 06:31:23.702285 Details available
In Infinera TNMS (Transcend Network Management System) 19.10.3, an insecure default configuration of the internal SFTP server on Linux servers allows remote attacker to access files and directories outside the SFTP user home directory.
Published: 2024-10-01T00:00:00.000Z
Updated: 2024-10-01T17:55:47.613Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.