CVE-2017-7237

The connected sources confirm CVE-2017-7237 affects Spiceworks Inventory 7.5’s TFTP server. An unauthenticated TFTP service on UDP port 69 allows remote attackers to access the Spiceworks data\configurations directory via a WRQ operation, with the CNVD entry noting potential file overwrite/upload...