What’s Vulnerable › Vulnerabilities

CVE-2024-25660

• Severity: critical (CVSS 9.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-10-01 · updated 2026-06-17
• Weakness: CWE-266

Description

The WebDAV service in Infinera TNMS (Transcend Network Management System) 19.10.3 allows a low-privileged remote attacker to conduct unauthorized file operations, because of execution with unnecessary privileges.

Affected products

• Nokia Transcend Network Management System: 19.10.3

References

• https://www.cvcn.gov.it/cvcn/cve/CVE-2024-25660
• https://www.nokia.com/optical-networks/infinera/

Get alerted when CVE-2024-25660 or the next vulnerability affects your stack