VulnerabilityModified

CVE-2009-3115

SolarWinds TFTP Server 9.2.0.111 and earlier allows remote attackers to cause a denial of service (service stop) via a crafted Option Acknowledgement (OACK) request.

MEDIUM 5.0EPSS 10.7%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 10.7%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.

Description

SolarWinds TFTP Server 9.2.0.111 and earlier allows remote attackers to cause a denial of service (service stop) via a crafted Option Acknowledgement (OACK) request. NOTE: some of these details are obtained from third party information.

CVSS 2.0: 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS: 10.66% probability · 96th percentile
CISA KEV: Not listed
Weakness: CWE-20
Affected: solarwinds/tftp server
Source: cve@mitre.org

References

http://secunia.com/advisories/36505Vendor Advisory
http://www.exploit-db.com/exploits/9547
http://www.securityfocus.com/bid/36182Exploit
http://secunia.com/advisories/36505Vendor Advisory
http://www.exploit-db.com/exploits/9547
http://www.securityfocus.com/bid/36182Exploit

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.