CVE-2024-14007: fallo de gravedad alta en Shenzhen TVT Digital Technology Co., Ltd.
TVT NVMS-9000 < 1.3.4 Unauthenticated Administrative Queries & Information Disclosure
Publicada el · Actualizada el
43Vexday Risk Score
Prioriza la corrección. Ella explotación observada por VulnCheck.
ssvc Actcvss 8.7epss 0.9%
de la publicación al arma
Publicada en NVD24 nov
VulnCheck24 nov
probabilidad de explotación
0.9%top 43% de las CVE
explotación observada
síVulnCheck
Shenzhen TVT Digital Technology Co., Ltd. NVMS-9000 firmware (used by many white-labeled DVR/NVR/IPC products) versions prior to 1.3.4 contain an authentication bypass in the NVMS-9000 control protocol. By sending a single crafted TCP payload to an exposed NVMS-9000 control port, an unauthenticated remote attacker can invoke privileged administrative query commands without valid credentials. Successful exploitation discloses sensitive information including administrator usernames and passwords in cleartext, network and service configuration, and other device details via commands such as queryBasicCfg, queryUserList, queryEmailCfg, queryPPPoECfg, and queryFTPCfg.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Productos afectados
Shenzhen TVT Digital Technology Co., Ltd. · NVMS-9000CVEs relacionadas — Shenzhen TVT Digital Technology Co., Ltd.
En el mismo producto, de las más peligrosas a las menos.
Referencias
https://ssd-disclosure.com/ssd-advisory-nvms9000-information-disclosure/https://undercodetesting.com/eleven11-botnet-mirai-variant-targeting-nvms-9000-devices/https://www.greynoise.io/blog/surge-exploitation-attempts-tvt-dvrshttps://www.vulncheck.com/advisories/tvt-nvms9000-unauthenticated-admin-queries-and-information-disclosure