PT-2026-5582 · Unknown · Tftp Turbo

Boku · Published 2026-02-01 · Updated 2026-02-01 · CVE-2020-37063

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TFTP Turbo version 4.6.1273

Description TFTP Turbo 4.6.1273 contains an unquoted service path issue that could allow local attackers to execute arbitrary code with elevated privileges. The issue stems from an unquoted path within the service configuration, which allows attackers to inject malicious executables. These injected executables can then be launched with LocalSystem permissions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2020-37063

Affected Products

Tftp Turbo

References · 5

• 🔥 https://exploit-db.com/exploits/48085 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-37063 · Security Note
• https://t.me/CVEtracker/43433 · Telegram Post
• https://vulncheck.com/advisories/tftp-turbo-tftp-turbo-unquoted-service-path · Note
• https://weird-solutions.com · Note