VulnerabilityModified
CVE-2009-1730
Multiple directory traversal vulnerabilities in NetMechanica NetDecision TFTP Server 4.2 allow remote attackers to read or modify arbitrary files via directory traversal sequences in the (1) GET or (2) PUT command.
HIGH 10.0EPSS 54.5%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 54.5%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.
Description
Multiple directory traversal vulnerabilities in NetMechanica NetDecision TFTP Server 4.2 allow remote attackers to read or modify arbitrary files via directory traversal sequences in the (1) GET or (2) PUT command.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 54.51% probability · 99th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- netmechanica/netdecision tftp server
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/35131Vendor Advisory
- http://www.princeofnigeria.org/blogs/index.php/2009/05/17/netdecision-tftp-server-4-2-tftp-directo?blog=1URL Repurposed
- http://www.securityfocus.com/bid/35002
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50574
- http://secunia.com/advisories/35131Vendor Advisory
- http://www.princeofnigeria.org/blogs/index.php/2009/05/17/netdecision-tftp-server-4-2-tftp-directo?blog=1URL Repurposed
- http://www.securityfocus.com/bid/35002
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50574
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.