CVE

CVE-2019-20085

TVT NVMS-1000 Directory Traversal Vulnerability

TVT · NVMS-1000

Date added (CISA)

2021-11-03

Remediation due

2022-05-03

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

TVT devices utilizing NVMS-1000 software contain a directory traversal vulnerability via GET /.. requests.