Port 69Trivial File Transfer Protocol (TFTP)
Trivial File Transfer Protocol (TFTP) is a simple, lightweight file transfer protocol used primarily within local networks for transmitting files without the complexities of authentication or directory visibility. It's typically used for bootstrapping devices, transferring firmware, or configuration files in a controlled environment..
- transport
- udp
- in transit
- cleartext
- assignment
- official
- risk
- 3/10
- lookups
- 9,140
single transport
payload readable on path
registered with iana
caution
rank 531 of 993 · top 53%
Technical Details
what runs on :69Overview:
TFTP, standardized under RFC 1350, is a simple lock-step protocol that allows a client to get or put a file onto a remote host. It utilizes UDP for communication, favoring speed and simplicity over guaranteed delivery. The protocol is especially effective in closed, reliable environments such as provisioning embedded devices.
Protocol Details:
Operating over UDP port 69, TFTP uses simple request and response messages—specifically read request (RRQ), write request (WRQ), data (DATA), acknowledgment (ACK), and error (ERROR) packets. The file transfer is split into fixed-size blocks (default 512 bytes), which must each be acknowledged by the receiver, ensuring some measure of flow control despite the unreliable nature of UDP.
Typical Applications:
TFTP is predominantly found in scenarios where minimal configuration and ease of implementation are required, such as:
- Booting diskless workstations and network devices (via PXE)
- Transferring firmware updates
- Backing up network device configurations
- Embedded system deployments Its simplicity allows for small code footprint implementations suitable for embedded environments.
Security Information
exposure of :69risk score
3/ 10caution
worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.
file transfer averages 4.1 across 114 ports — this one sits 1.1 below.
in transit
cleartext
credentials and payloads are readable by anyone on path
assignment
official
registered with iana for this service — scanners fingerprint it by number
reachable over
udp
udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite
security overview
Common Vulnerabilities:
- Because TFTP lacks authentication and encryption, it is susceptible to unauthorized file retrieval or tampering.
- Attackers can exploit TFTP servers to download sensitive files or upload malicious files if permissions are misconfigured.
- TFTP servers are vulnerable to spoofed requests or denial-of-service (DoS) through resource exhaustion.
Common Mitigations:
- Restrict TFTP server access using network access controls and firewall rules to trusted devices and segments.
- Avoid exposing TFTP services to untrusted or public networks.
- Limit the directories accessible by the TFTP server with strict permissions.
- Use alternative, secure file transfer protocols when transmitting sensitive data (e.g., SFTP or FTPS).
- Monitor and log TFTP server activity to identify unauthorized access attempts.
Related Ports
the 8 most looked-up other ports in file transfer — 114 ports carry that label.
| port | service | risk | |||
|---|---|---|---|---|---|
| :9080 | Groove RPC | TCPUDP | Web Services | caution | 70.8k |
| :17500 | Dropbox LAN Sync | TCPUDP | File Transfer | caution | 43.7k |
| :548 | Apple Filing Protocol | TCP | File Transfer | caution | 36.8k |
| :7000 | Vuze HTTPS Tracker | TCPtls | Security | caution | 28.9k |
| :1337 | PowerFolder P2P | TCP | Security | caution | 27.1k |
| :9001 | SharePoint Authoring | Web Services | caution | 26.3k | |
| :8080 | FilePhile Relay | UDP | File Transfer | caution | 25.6k |
| :1337 | WASTE Encrypted Sharing | TCP | Security | caution | 22.9k |
risk mix of the 8 listed
- caution100%
1 of 8 encrypted