PT-2026-2428 · Unknown · Tftpd32 Se

Ismael Nava · Publicado 2026-01-13 · Atualizado 2026-01-14 · CVE-2023-54338

Positive Technologies (AI Summary)

CVSS v3.1

8.4

Alta

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Tftpd32 SE version 4.60

Description The software contains an unquoted service path issue that may allow local attackers to execute arbitrary code with elevated privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious executables that will be run with system-level permissions.

Recommendations Update to a newer version that addresses this issue. As a temporary workaround, consider modifying the service configuration to use quoted paths to prevent the execution of unauthorized code.

Exploit

Correção

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2023-54338

Produtos afetados

Tftpd32 Se

Referências · 5

• 🔥 https://exploit-db.com/exploits/51076 · Exploit
• https://vulncheck.com/advisories/tftpdse-tftpdsvc-unquoted-service-path · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-54338 · Nota de Segurança
• https://twitter.com/CVEnew/status/2011383038211395807 · Publicação no Twitter
• https://pjo2.github.io/tftpd64 · Nota