Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 10/05/2023 Updated: 24/05/2023

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 0

An issue was found in Genesys CIC Polycom phone provisioning TFTP Server all version allows a remote malicious user to execute arbitrary code via the login crednetials to the TFTP server configuration page.

Vulnerable Product	Search on Vulmon	Subscribe to Product
genesys tftp server

Info and exploit for CVE-2023-29930: blind file read/write in Genesys TFTP provisioning server configuration

TFTPlunder: an exploit for CVE-2023-29930 This is an exploit script for a blind file read / write vulnerability in the Genesys (formerly InIn) TFTP provisioning server Vulnerability info This vulnerability is due to unrestricted configuration options for the TFTP root path and file extensions In other words, from the Admin interface, you can change the TFTP to any directory a

CWE-434 https://github.com/YSaxon/TFTPlunder https://help.genesys.com/pureconnect/mergedprojects/wh_tr/mergedprojects/wh_tr_polycom_phones/desktop/configuring_the_tftp_server1.htm https://nvd.nist.gov https://github.com/YSaxon/TFTPlunder

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2023-29930

Vulnerability Summary

Vulnerability Trend

Github Repositories

References

Vulmon Search

About

Products

Connect