tvt vulnerabilities

Products

• td-2104ts-cl firmware 2
• td-2108ts-hp firmware 2
• avision av108t firmware 1
• AVISION DVR AV108T 1
• dvr 1
• dvr firmware 1
• dvr td 2014ts cl 1
• dvr td 2018ts hp 1
• DVR TD-2104TS-CL 1
• DVR TD-2108TS-HP 1
• nvms-1000 firmware 1
• provision isr dvr sh 4050a5 5lmm 1
• Provision-ISR DVR SH-4050A5-5L(MM) 1
• td-2004ts-cl firmware 1
• td-2004ts-cl-c firmware 1
• td-2008ts-cl firmware 1
• td-2104ts-cl-a firmware 1
• td-2104ts-hc firmware 1
• td-2104ts-hp firmware 1
• td-2108ts-cl firmware 1
• td-2108ts-cl-a firmware 1
• td-2108ts-hc firmware 1
• td-2116te-hp firmware 1
• td-2116ts-cl firmware 1
• td-2116ts-hc firmware 1
• td-2704ts-hc firmware 1
• td-2704ts-hp firmware 1
• td-2708te-hk firmware 1
• td-2708te-hp firmware 1
• td-2708ts-hc firmware 1

Latest tvt CVEs

Newest publication first

1. CVE-2025-34036 Shenzhen TVT CCTV-DVR Command Injection

   Published 2025-06-24

   Critical·CVSS 10.0 EPSS 30.9%

   An OS command injection vulnerability exists in white-labeled DVRs manufactured by TVT, affecting a custom HTTP service called "Cross Web Server" that listens on TCP ports 81 and 82. The web interface fails to sanitize input in the URI path passed to the language extraction funct...

2. CVE-2024-7339 TVT DVR TD-2104TS-CL queryDevInfo information disclosure

   Published 2024-08-01

   Medium·CVSS 6.9 EPSS 32.0%

   A vulnerability has been found in TVT DVR TD-2104TS-CL, DVR TD-2108TS-HP, Provision-ISR DVR SH-4050A5-5L(MM) and AVISION DVR AV108T and classified as problematic. This vulnerability affects unknown code of the file /queryDevInfo. The manipulation leads to information disclosure....

3. CVE-2019-20085 TVT NVMS-1000 devices allow GET /.. Directory Traversal

   Published 2019-12-30

   High·CVSS 7.5 EPSS 96.1% CISA KEV added 2021-11-03 Exploited in the wild Public exploit

   TVT NVMS-1000 devices allow GET /.. Directory Traversal

4. CVE-2013-6023 Directory traversal vulnerability in the TVT TD-2308SS-B DVR with firmware 3.2.0.P-3520A-00 and earlier allows remote attackers to read arbitrary files via .. (dot dot) in the URI.

   Published 2013-11-02

   High·CVSS 7.8 EPSS 10.2%

   Directory traversal vulnerability in the TVT TD-2308SS-B DVR with firmware 3.2.0.P-3520A-00 and earlier allows remote attackers to read arbitrary files via .. (dot dot) in the URI.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.