CVE-1999-1421
MediumExploitation Probability (EPSS)
Elevated risk72th percentile - higher than 72% of all known CVEs
Summary
NBase switches NH208 and NH215 run a TFTP server which allows remote attackers to send software updates to modify the switch or cause a denial of service (crash) by guessing the target filenames, which have default names.
Risk Assessment
Attackers can exploit this vulnerability to remotely modify the switch's configuration or cause it to crash, potentially leading to network outages.
Recommendation
It is recommended to disable the TFTP server on the switches or configure it to restrict access to trusted sources only.
Original NVD description (English source)
NBase switches NH208 and NH215 run a TFTP server which allows remote attackers to send software updates to modify the switch or cause a denial of service (crash) by guessing the target filenames, which have default names.