SolarWinds Tftp Server vulnerabilities

6 CVEs affecting SolarWinds Tftp Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-2310, published 2010-06-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2010-2115, published 2010-05-28. Medium severity, CVSS 5.0. EPSS: 56% chance of exploitation in the next 30 days. SolarWinds TFTP Server 10.4.0.10 allows remote attackers to cause a denial of service (no new connections) via a crafted read request.
CVE-2002-1542, published 2003-03-31. Medium severity, CVSS 5.0. EPSS: 13.2% chance of exploitation in the next 30 days. SolarWinds TFTP server 5.0.55 and earlier allows remote attackers to cause a denial of service (crash) via a large UDP datagram, possibly triggering a buffer overflow.
CVE-2002-1209, published 2002-11-04. Medium severity, CVSS 5.0. EPSS: 12.9% chance of exploitation in the next 30 days. Directory traversal vulnerability in SolarWinds TFTP Server 5.0.55, and possibly earlier, allows remote attackers to read arbitrary files via "..\" (dot-dot backslash) sequences in a GET request.
CVE-2010-2310, published 2010-06-16. Medium severity, CVSS 5.0. EPSS: 11% chance of exploitation in the next 30 days. SolarWinds TFTP Server 10.4.0.13 allows remote attackers to cause a denial of service (crash) via a long write request.
CVE-2009-3115, published 2009-09-09. Medium severity, CVSS 5.0. EPSS: 10.7% chance of exploitation in the next 30 days. SolarWinds TFTP Server 9.2.0.111 and earlier allows remote attackers to cause a denial of service (service stop) via a crafted Option Acknowledgement (OACK) request. NOTE: some of these details are…
CVE-2006-1951, published 2006-04-24. Medium severity, CVSS 5.0. EPSS: 4% chance of exploitation in the next 30 days. Directory traversal vulnerability in SolarWinds TFTP Server 8.1 and earlier allows remote attackers to download arbitrary files via a crafted GET request including "....//" sequences, which are…