Vulnerability Description
A Path Traversal vulnerability in the tftpsync/add and tftpsync/delete scripts allows a remote attacker on an adjacent network to write or delete files on the filesystem with the privileges of the unprivileged wwwrun user. Although the endpoint is unauthenticated, access is restricted to a list of allowed IP addresses.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2025-53880?
CVE-2025-53880 is a documented vulnerability. A Path Traversal vulnerability in the tftpsync/add and tftpsync/delete scripts allows a remote attacker on an adjacent network to write or delete files on the filesystem with the privileges of the unp...
How severe is CVE-2025-53880?
CVSS scoring is not yet available for CVE-2025-53880. Check NVD for updates.
Is there a patch for CVE-2025-53880?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.