CVE-2009-3115: SolarWinds Tftp Server

Medium severity, CVSS 5.0. EPSS: 10.7% chance of exploitation in the next 30 days.

SolarWinds TFTP Server 9.2.0.111 and earlier allows remote attackers to cause a denial of service (service stop) via a crafted Option Acknowledgement (OACK) request. NOTE: some of these details are obtained from third party information.

Affected products

• SolarWinds Tftp Server: up to and including 9.2.0.111; version 5.0.55 only; version 5.0.60 only; version 8.1 only; version 8.2 only

Published 2009-09-09. Last modified 2026-06-16.