Описание
Directory traversal vulnerability in k23productions TFTPUtil GUI 1.2.0 and 1.3.0 allows remote attackers to read arbitrary files outside the TFTP root directory via directory traversal sequences in a GET request.
Ссылки
- Vendor Advisory
- Patch
- URL Repurposed
- Patch
- Vendor Advisory
- Patch
- URL Repurposed
- Patch
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:windows_tftp_utility:tftputil:1.2.0:*:*:*:*:*:*:*
cpe:2.3:a:windows_tftp_utility:tftputil:1.3.0:*:*:*:*:*:*:*
EPSS
Процентиль: 75%
0.00864
Низкий
5 Medium
CVSS2
Дефекты
CWE-22
Связанные уязвимости
github
почти 4 года назад
Directory traversal vulnerability in k23productions TFTPUtil GUI 1.2.0 and 1.3.0 allows remote attackers to read arbitrary files outside the TFTP root directory via directory traversal sequences in a GET request.
EPSS
Процентиль: 75%
0.00864
Низкий
5 Medium
CVSS2
Дефекты
CWE-22