Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in SolarWinds TFTP Server 8.1 and earlier allows remote attackers to download arbitrary files via a crafted GET request including "....//" sequences, which are collapsed into "../" sequences by filtering.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SolarWinds TFTP Server目录遍历漏洞
Vulnerability Description
SolarWinds TFTP服务程序可以同时发送和接收多个文件,常用于下载/上传路由器、交换机等可执行映象和配置文件。 TFTP Server对大多数类似于"../filename"的请求文件名都会进行过滤,但可通过控制文件名来绕过过滤,然后下载系统上的任意文件。
CVSS Information
N/A
Vulnerability Type
N/A