Directory traversal vulnerability in SolarWinds TFTP Server 8.1 and earlier allows remote attackers to download arbitrary files via a crafted GET request including \....//\ sequences which are collapsed into \../\ sequences by filtering.