CVE-2024-25659

Summary

CVE-2024-25659 is a vulnerability affecting Infinera TNMS (Transcend Network Management System) version 19.10.3. This issue involves an insecure default configuration of the internal SFTP server on Linux servers. A remote attacker can exploit this weakness to gain access to files and directories beyond the SFTP user home directory, potentially leading to data exposure or unauthorized system modifications. This vulnerability may pose a significant risk if not addressed promptly. It is highly recommended that affected organizations update their TNMS installations as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.