{"id":"CVE-2024-25659","aliases":["EUVD-2024-22975","GHSA-xxc2-5537-pj53"],"status":"published","title":"In Infinera TNMS (Transcend Network Management System) 19.10.3, an insecure default configuration...","description":"In Infinera TNMS (Transcend Network Management System) 19.10.3, an insecure default configuration of the internal SFTP server on Linux servers allows remote attacker to access files and directories outside the SFTP user home directory.","severity":{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.00728,"percentile":0.54685,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-22"],"published":"2024-10-01T00:00:00Z","modified":"2026-06-17T07:16:23Z","products":[{"vendor":"infinera","product":"tnms"},{"vendor":"nokia","product":"transcend_network_management_system"}],"references":[{"url":"https://www.cvcn.gov.it/cvcn/cve/CVE-2024-25659","tags":["Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-25659"},{"url":"https://github.com/advisories/GHSA-xxc2-5537-pj53"}],"sources":{"cve":[{"id":"CVE-2024-25659","description":"In Infinera TNMS (Transcend Network Management System) 19.10.3, an insecure default configuration of the internal SFTP server on Linux servers allows remote attacker to access files and directories outside the SFTP user home directory.","status":"published","published":"2024-10-01T00:00:00Z","modified":"2024-10-01T17:55:47.613Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:34:04.341725Z"}],"euvd":[{"id":"EUVD-2024-22975","description":"In Infinera TNMS (Transcend Network Management System) 19.10.3, an insecure default configuration of the internal SFTP server on Linux servers allows remote attacker to access files and directories outside the SFTP user home directory.","status":"published","published":"2024-10-01T00:00:00Z","modified":"2024-10-01T17:55:47Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:27:59.918435Z"}],"ghsa":[{"id":"GHSA-xxc2-5537-pj53","title":"In Infinera TNMS (Transcend Network Management System) 19.10.3, an insecure default configuration...","description":"In Infinera TNMS (Transcend Network Management System) 19.10.3, an insecure default configuration of the internal SFTP server on Linux servers allows remote attacker to access files and directories outside the SFTP user home directory.","status":"published","published":"2024-10-01T18:31:18Z","modified":"2024-10-01T21:32:36Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:58:23.554604Z"}],"nvd":[{"id":"CVE-2024-25659","description":"In Infinera TNMS (Transcend Network Management System) 19.10.3, an insecure default configuration of the internal SFTP server on Linux servers allows remote attacker to access files and directories outside the SFTP user home directory.","status":"published","published":"2024-10-01T16:15:09.363Z","modified":"2026-06-17T07:16:23.087Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:10:30.673028Z"}]}}