T1542.005PersistenceStealth
TFTP Boot
Adversaries may abuse netbooting to load an unauthorized network device operating system from a Trivial File Transfer Protocol (TFTP) server. TFTP boot (netbooting) is commonly used by network administrators to load configuration-controlled network device images from a centralized management server. Netbooting is one option in the boot sequence and can be used to centralize, manage, and control…
CVEs1
In CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it.1
Reports0
CVEs linked to TFTP Boot
1 CVE, by priority. Each link shows its badge.- CVE-2017-6742Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityCisco · IOS and IOS XE SoftwareKEVPublic exploitHigh · 8.8T1574Hijack Execution FlowT1059Command and Scripting Interpreter+2 moreMITRE CTID mapping of the KEV entry · follow-on activity21.4%Top 2.4%68.7priority