CVE-2008-1611

CVE-2008-1611 is a critical stack-based buffer overflow vulnerability affecting TFTP Server SP 1.4 for Windows. This flaw allows remote unauthenticated attackers to trigger a denial of service or execute arbitrary code by sending a crafted read or write request with an excessively long filename. With a CVSS score of 10.0 and a FAUCET Risk Score of 100/100, this vulnerability presents a severe risk due to its network-based attack vector and low attack complexity, leading to complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog, multiple public exploit modules exist, including Metasploit and ExploitDB entries, indicating readily available exploit code. Despite its age and lack of recent community discussion or media coverage, the high EPSS score suggests a significant probability of exploitation.