CVEvulnerability
CVE-2020-26130
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-10-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-732
Description
Issues were discovered in Open TFTP Server multithreaded 1.66 and Open TFTP Server single port 1.66. Due to insufficient access restrictions in the default installation directory, an attacker can elevate privileges by replacing the OpenTFTPServerMT.exe or the OpenTFTPServerSP.exe binary.
Affected configurations
• open tftp server project open tftp server 1.66
Related
Weakness · CWE (1)
- CWE-732 Incorrect Permission Assignment for Critical Resource weakness
References
- https://github.com/OffensiveOceloot/advisories/blob/main/CVE-2020-26130.md github.com
- https://github.com/an0ry/advisories Exploit, Third Party Advisory
- https://sourceforge.net/projects/tftp-server/ Product
- https://github.com/OffensiveOceloot/advisories/blob/main/CVE-2020-26130.md github.com
- https://github.com/an0ry/advisories Exploit, Third Party Advisory
- https://sourceforge.net/projects/tftp-server/ Product