:Luigi Auriemma has reported some vulnerabilities in Acronis Snap Deploy, which can be exploited by malicious people to disclose sensitive information or cause a DoS (Denial of Service).1) A NULL-pointer dereference error within the PXE Server (pxesrv.exe) can be exploited to crash the service via a specially crafted TFTP request.2) An input validation error within the PXE Server can be exploited to download arbitrary files outside the TFTP root via directory traversal attacks.The vulnerabilities are reported in version 2.0.0.1076. Other versions may also be affected.Solution:Restrict network access to the service.Provided and/or discovered by:Luigi AuriemmaOriginal Advisory:http://aluigi.altervista.org/adv/acropxe-adv.txt

Original post by pooja