Directory traversal vulnerability in 2X TFTP service (TFTPd.exe) 3.2.0.0 and earlier in 2X ThinClientServer 5.0_sp1-r3497 and earlier allows remote attackers to read or overwrite arbitrary files via a ... (dot dot dot) in the filename.
| Software | From | Fixed in |
|---|---|---|
| 2x / thinclientserver | - | 3.2.0.0.x |
| 2x / thinclientserver | - | 5.0.x |