High severityNVD Advisory· Published Oct 30, 2025· Updated Apr 15, 2026
CVE-2025-53880
CVE-2025-53880
Description
A Path Traversal vulnerability in the tftpsync/add and tftpsync/delete scripts allows a remote attacker on an adjacent network to write or delete files on the filesystem with the privileges of the unprivileged wwwrun user. Although the endpoint is unauthenticated, access is restricted to a list of allowed IP addresses.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- osv-coords2 versionspkg:rpm/suse/release-notes-susemanager&distro=SUSE%20Manager%20Server%20LTS%204.3pkg:rpm/suse/release-notes-susemanager-proxy&distro=SUSE%20Manager%20Proxy%20LTS%204.3
< 4.3.16.1-150400.3.143.2+ 1 more
- (no CPE)range: < 4.3.16.1-150400.3.143.2
- (no CPE)range: < 4.3.16.1-150400.3.101.2
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.