CRITICAL🇵🇱 Wersja polska

CVE-2024-25660

CVSS 9.0v3.1pub. 2024-10-01upd. 2025-07-03

The WebDAV service in Infinera TNMS (Transcend Network Management System) 19.10.3 allows a low-privileged remote attacker to conduct unauthorized file operations, because of execution with unnecessary privileges.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

  • Nokia Transcend Network Management System

    APP
    Nokia
    19.10.3
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2024-25659HIGH7.2ten sam produkt

In Infinera TNMS (Transcend Network Management System) 19.10.3, an insecure default configuration of the inter...

CVE-2024-25661HIGH7.7ten sam produkt

In Infinera TNMS (Transcend Network Management System) 19.10.3, cleartext storage of sensitive information in ...

CVE-2024-25658MEDIUM6.5ten sam produkt

Cleartext storage of passwords in Infinera TNMS (Transcend Network Management System) Server 19.10.3 allows at...

CVE-2025-27019CRITICAL9.8PL ✓ten sam vendor

Nokia Infinera MTC-9: dostęp bez hasła przez usługę RSH umożliwia reverse shell

CVE-2025-27020CRITICAL9.8PL ✓ten sam vendor

Pominięcie uwierzytelnienia SSH w Nokia Infinera MTC-9 umożliwia RCE