Description
TFTP Broadband 4.3.0.1465 contains an unquoted service path vulnerability in the tftpt.exe service binary that allows local attackers to execute arbitrary code with system privileges. Attackers can place a malicious executable in the Program Files directory path that will be executed during service startup or system reboot with LocalSystem privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Weird-Solutions | TFTP Broadband | 4.3.0.1465 | — |
References
- ExploitDB-49852 exploit
- Official Product Homepage product
- VulnCheck Advisory: TFTP Broadband 4.3.0.1465 Unquoted Service Path Privilege Escalation third-party-advisory