PT-2024-21075 · Infinera · Infinera Tnms

Published 2024-10-01 · Updated 2025-07-03 · CVE-2024-25659

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Infinera TNMS (Transcend Network Management System) version 19.10.3

Description The issue is related to an insecure default configuration of the internal SFTP server on Linux servers, which allows a remote attacker to access files and directories outside the SFTP user home directory.

Recommendations For Infinera TNMS (Transcend Network Management System) version 19.10.3, consider reconfiguring the internal SFTP server to restrict access to the SFTP user home directory only, until a patch or official fix is available.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2024-25659

Affected Products

Infinera Tnms

References · 7

• https://osv.dev/vulnerability/CVE-2024-25659 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-25659 · Security Note
• https://twitter.com/CVEnew/status/1841135267513610400 · Twitter Post
• https://cvcn.gov.it/cvcn/cve/CVE-2024-25659 · Note
• https://t.me/cvenotify/96738 · Telegram Post
• https://t.me/cvenotify/127587 · Telegram Post
• https://t.me/cvedetector/6777 · Telegram Post