Read the docs

TVT

Records4All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

TVT records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

4 records

TI-2019-14494 CVE-2019-20085 · GHSA-6mf3-7mpr-9mgf

TVT NVMS-1000 devices allow GET /..

Priority CRITICAL 90KEV

TVT NVMS-1000 devices allow GET /..

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.96071 Published 2019-12-30 No fix listed CWE-22
TI-2025-24205 CVE-2025-34036 · GHSA-ppp6-57cw-px5q

Shenzhen TVT CCTV-DVR Command Injection

Priority HIGH 82

An OS command injection vulnerability exists in white-labeled DVRs manufactured by TVT, affecting a custom HTTP service called "Cross Web Server" that listens on TCP ports 81 and 82.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.30915 Published 2025-06-24 No fix listed CWE-78
Priority HIGH 70

A vulnerability has been found in TVT DVR TD-2104TS-CL, DVR TD-2108TS-HP, Provision-ISR DVR SH-4050A5-5L(MM) and AVISION DVR AV108T and classified as problematic.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.32028 Published 2024-08-01 No fix listed CWE-200
Open these records in search →