CVE-2011-4722: ipswitch tftp_server Path Traversal
Vulnerability summary
CVE-2011-4722 is a high (CVSS 7.8) Path Traversal vulnerability in ipswitch tftp_server. EPSS estimates a 58.23% chance of exploitation in the next 30 days, higher than 99% of scored vulnerabilities. 3 public exploits are recorded.
Timeline
- 28-12-2014PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Directory traversal vulnerability in the TFTP Server 1.0.0.24 in Ipswitch WhatsUp Gold allows remote attackers to read arbitrary files via a .. (dot dot) in the Filename field of an RRQ operation.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
58.23%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
0.00 pp
From 58.23% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
3 foundExploit Reference (secpod.org)
Maturity: unknown
Ipswitch TFTP Server 1.0.0.24 - Directory Traversal
Maturity: weaponized
IpSwitch WhatsUp Gold TFTP Directory Traversal
auxiliary/scanner/tftp/ipswitch_whatsupgold_tftp
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Ipswitch1 product
- tftp_server1.0.0.24
1 vendor · 1 product