TI-2019-14494 CVE-2019-20085 · GHSA-6mf3-7mpr-9mgf
TVT NVMS-1000 devices allow GET /..
Priority CRITICAL 90KEV
TVT NVMS-1000 devices allow GET /..
4 records
TVT NVMS-1000 devices allow GET /..
An OS command injection vulnerability exists in white-labeled DVRs manufactured by TVT, affecting a custom HTTP service called "Cross Web Server" that listens on TCP ports 81 and 82.
A vulnerability has been found in TVT DVR TD-2104TS-CL, DVR TD-2108TS-HP, Provision-ISR DVR SH-4050A5-5L(MM) and AVISION DVR AV108T and classified as problematic.
Directory traversal vulnerability in the TVT TD-2308SS-B DVR with firmware 3.2.0.P-3520A-00 and earlier allows remote attackers to read arbitrary files via ..