D-Link D-View TftpSendFileThread Directory Traversal Information Disclosure Vulnerability

CVE-2023-32164

Summary

The D-Link D-View TftpSendFileThread is affected by a directory traversal vulnerability that could permit remote attackers to access sensitive information stored on vulnerable installations. This flaw arises from inadequate validation of user-provided paths prior to execution in file operations. Malicious actors could exploit this weakness without authentication, granting them access to files and potentially compromising the security of the affected systems. The vulnerability poses significant risks and highlights the need for immediate attention and remediation.

References