PT-2026-5582 · Unknown · Tftp Turbo

Boku · Publicado 2026-02-01 · Atualizado 2026-02-01 · CVE-2020-37063

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TFTP Turbo version 4.6.1273

Description TFTP Turbo 4.6.1273 contains an unquoted service path issue that could allow local attackers to execute arbitrary code with elevated privileges. The issue stems from an unquoted path within the service configuration, which allows attackers to inject malicious executables. These injected executables can then be launched with LocalSystem permissions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2020-37063

Produtos afetados

Tftp Turbo

Referências · 5

• 🔥 https://exploit-db.com/exploits/48085 · Exploit
• https://t.me/CVEtracker/43433 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2020-37063 · Nota de Segurança
• https://vulncheck.com/advisories/tftp-turbo-tftp-turbo-unquoted-service-path · Nota
• https://weird-solutions.com · Nota