An NMAP scan of a server shows port 69 is open. What risk could this pose?

TFTP (Trivial File Transfer Protocol) operates on UDP port 69 and was designed as a minimal file transfer protocol with no authentication, no directory listing, and no access controls. An open TFTP port means any unauthenticated user on the network can potentially read or overwrite files on the server, including sensitive configuration files.

Weak SSL version vulnerabilities are associated with HTTPS on port 443, not with TFTP on port 69.

Cleartext login credentials are the primary risk for services like FTP (port 21) and Telnet (port 23); TFTP has no login mechanism at all, not even a cleartext one.

Web portal data leaks are associated with HTTP/HTTPS services on ports 80 and 443, not the TFTP service on port 69.