CVE-2019-20085
tvt nvms-1000 firmware
Published 30 Dec 2019 · updated 17 Jun 2026 · Analyzed
7.5 High · CVSS 3.1, NVD
Exploited in the wild
CISA added this to its Known Exploited Vulnerabilities catalog on 3 Nov 2021, with a remediation deadline of 3 May 2022 for US federal agencies.
Required action: Apply updates per vendor instructions.
Description
TVT NVMS-1000 devices allow GET /.. Directory Traversal
References
- packetstormsecurity.com/files/157196/TVT-NVMS-1000-Directory-Traversal.html · Exploit, Third Party Advisory, VDB Entry
- www.exploit-db.com/exploits/47774 · Exploit, Third Party Advisory, VDB Entry
- www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-20085 · US Government Resource