CVE-2020-26130

Name of the Vulnerable Software and Affected Versions Open TFTP Server multithreaded version 1.66 Open TFTP Server single port version 1.66

Description The issue is related to insufficient access restrictions in the default installation directory of Open TFTP Server, allowing an attacker to elevate privileges. This can be achieved by replacing the OpenTFTPServerMT.exe or the OpenTFTPServerSP.exe binary.

Recommendations For Open TFTP Server multithreaded version 1.66, restrict access to the installation directory to prevent unauthorized modifications to the OpenTFTPServerMT.exe binary. For Open TFTP Server single port version 1.66, restrict access to the installation directory to prevent unauthorized modifications to the OpenTFTPServerSP.exe binary.