CVE-2019-20085

TVT NVMS-1000 devices allow GET /.. Directory Traversal

Basic Information

CVE State: PUBLISHED
Reserved Date: December 30, 2019
Published Date: December 30, 2019
Last Updated: February 04, 2025
Vendor: n/a
Product: n/a
Description: TVT NVMS-1000 devices allow GET /.. Directory Traversal

CVSS Scores

SSVC Information

Exploitation: active
Automatable: Yes
Technical Impact: partial

Exploit Status

Exploited in the Wild: Yes (added 2021-11-03 00:00:00 UTC) Source

References

https://www.exploit-db.com/exploits/47774 http://packetstormsecurity.com/files/157196/TVT-NVMS-1000-Directory-Traversal.html

Known Exploited Vulnerability Information

Source	Added Date
CISA	2021-11-03 00:00:00 UTC

Scanner Integrations

Scanner	URL	Date Detected
Nuclei	https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-20085.yaml	2025-04-26 00:00:00 UTC