← back
CVE-2012-6664criticalCWE-22

CVE-2012-6664

68Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendcvss 9.1epss 30%
from disclosure to weapon0 days
Published on NVDJun 21
metasploitApr 8
exploitation probability
30%top 2% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Multiple directory traversal vulnerabilities in the TFTP Server in Distinct Intranet Servers 3.10 and earlier allow remote attackers to read or write arbitrary files via a .. (dot dot) in the (1) get or (2) put commands.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.