CVE-2009-1730 EXPLOIT
10.0
HIGH · CVSS 2.0 · EPSS 54.5% (pctl 99)
Patch early
A public exploit exists.
Description
Multiple directory traversal vulnerabilities in NetMechanica NetDecision TFTP Server 4.2 allow remote attackers to read or modify arbitrary files via directory traversal sequences in the (1) GET or (2) PUT command.
Scoring
| CVSS | 10.0 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
| EPSS | 54.51% — more likely to be exploited than 99% of all CVEs |
| Weakness | CWE-22 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2009-05-20 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| netmechanica | netdecision tftp server |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | NetDecision 4.2 - TFTP Writable Directory Traversal Execution (Metasploit) | 2012-08-10 |
References
- http://secunia.com/advisories/35131
- http://www.princeofnigeria.org/blogs/index.php/2009/05/17/netdecision-tftp-server-4-2-tftp-directo?blog=1
- http://www.securityfocus.com/bid/35002
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50574
- http://secunia.com/advisories/35131
- http://www.princeofnigeria.org/blogs/index.php/2009/05/17/netdecision-tftp-server-4-2-tftp-directo?blog=1
- http://www.securityfocus.com/bid/35002
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50574
→ the Explorer · watch your stack · NVD