CVE Daily

CVE-2018-10389

Format string vulnerability in the logMess function in TFTP Server MT 1.65 and e...

Critical CVSS 9.8

Overview

Format string vulnerability in the logMess function in TFTP Server MT 1.65 and earlier allows remote attackers to perform a denial of service or execute arbitrary code via format string sequences in a TFTP error packet.

CWE: CWE-134 Published: 2019-12-23T23:15:11.677
Risk analysis

This vulnerability is rated 🔴 CRITICAL.

  • CVSS: 9.8 (CRITICAL)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags