CVE-2023-0887: phjounin TFTPD64-SE tftpd64_svc.exe unquoted search path

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-02-17 · updated 2026-06-17
Weakness: CWE-428

Description

A vulnerability was found in phjounin TFTPD64-SE 4.64 and classified as critical. This issue affects some unknown processing of the file tftpd64_svc.exe. The manipulation leads to unquoted search path. An attack has to be approached locally. The complexity of an attack is rather high. The exploitation is known to be difficult. The associated identifier of this vulnerability is VDB-221351.

Affected products

phjounin TFTPD64-SE: 4.64

References

https://vuldb.com/?ctiid.221351
https://vuldb.com/?id.221351
https://vuldb.com/?ctiid.221351
https://vuldb.com/?id.221351

Get alerted when CVE-2023-0887 or the next vulnerability affects your stack