CVE-2020-37250

Name of the Vulnerable Software and Affected Versions TFTP Broadband version 4.3.0.1465

Description The tftpt.exe service binary contains an unquoted service path issue. This occurs when a service path contains spaces and is not enclosed in quotation marks, allowing a local attacker to place a malicious executable in the directory path. This executable can then be run with system privileges during service startup or a system reboot.

Recommendations Update TFTP Broadband version 4.3.0.1465 to a version that fixes the unquoted service path in the tftpt.exe service binary.