File transfer & sharingUDP 69 Cleartext by default
Port 69: TFTP
Trivial File Transfer Protocol
A minimal file transfer protocol with no authentication, used for network boot (PXE) and device configuration backups.
Secure alternative: SFTP or SCP
How attackers abuse it
- Anyone who can reach it can read or write files, including device configurations with passwords.
How to defend it
- Restrict to management networks.
- Do not store sensitive configurations on TFTP servers.
Exam tip
TFTP has no authentication at all - not even a cleartext password.