CVE-2008-1281

CVE-2008-1281 describes a directory traversal vulnerability in TFTPsrvs.exe, specifically versions 2.5.3.1 and earlier, as integrated into Argon Technology Client Management Services (CMS) 1.31 and earlier. This flaw allows unauthenticated remote attackers to read arbitrary files on the affected system by including ".." (dot dot) sequences in the filename parameter of a TFTP request. The vulnerability carries a CVSS score of 5.0, indicating a medium severity, with low attack complexity and no authentication required, potentially leading to unauthorized information disclosure. While the EPSS score is low and there is no evidence of active exploitation, public exploit code, or significant community discussion, the potential for sensitive data exposure remains.