Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Spiceworks TFTP Server, as distributed with Spiceworks Inventory 7.5, allows remote attackers to access the Spiceworks data\configurations directory by leveraging the unauthenticated nature of the TFTP service for all clients who can reach UDP port 69, as demonstrated by a WRQ (aka Write request) operation for a configuration file or an executable file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Spiceworks Inventory Spiceworks TFTP Server 安全漏洞
Vulnerability Description
SpiceWorks是美国Spiceworks公司的一套针对中小型企业的网络设备管理和监控软件。Inventory是其中的一个网络配置模块。Spiceworks TFTP Server是其中的一个用于配置TFTP服务器的工具。 Spiceworks Inventory 7.5版本发布的Spiceworks TFTP Server中存在安全漏洞。远程攻击者可利用该漏洞访问Spiceworks dataconfigurations目录。
CVSS Information
N/A
Vulnerability Type
N/A