What the vulnerability does
01Description
Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially contains previously allocated data.
CVSS base score
2.7/10
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Key dates
02Disclosure timeline
December 13, 2022
CVE published
January 14, 2025
Record updated
External resources
