CVE-2008-1620: 2x Thinclientserver

High severity, CVSS 7.5. EPSS: 3% chance of exploitation in the next 30 days.

Directory traversal vulnerability in 2X TFTP service (TFTPd.exe) 3.2.0.0 and earlier in 2X ThinClientServer 5.0_sp1-r3497 and earlier allows remote attackers to read or overwrite arbitrary files via a ... (dot dot dot) in the filename.

Affected products

• 2x Thinclientserver: up to and including 3.2.0.0; up to and including 5.0

Published 2008-04-02. Last modified 2026-06-16.