high7.8Public exploit code
CVE-2013-6023
Directory traversal vulnerability in the TVT TD-2308SS-B DVR with firmware 3.2.0.P-3520A-00 and earlier allows remote attackers to read arbitrary files via ..
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- TVT TD-2308SS-B DVR - Directory Traversal2013-12-01 · webapps · hardware
Impact
Directory traversal vulnerability in the TVT TD-2308SS-B DVR with firmware 3.2.0.P-3520A-00 and earlier allows remote attackers to read arbitrary files via .. (dot dot) in the URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tvt | Dvr | Version td-2308ss-b |
| Tvt | Dvr Firmware | through 3.2.0.p-3520a-03 Versions 3.1.6.p-1.0.2.1-03, 3.1.7.b-1.0.2.1-00, 3.1.43.b, 3.1.43.p, 3.1.75.b-1.0.2.1-00 |
Weakness classification
References
- NVD record
- CVE.org record
- http://alguienenlafisi.blogspot.com/2013/10/dvr-tvt-directory-traversal.html
- http://www.exploit-db.com/exploits/29959
- http://www.kb.cert.org/vuls/id/785838
- http://www.securityfocus.com/bid/63360
- http://alguienenlafisi.blogspot.com/2013/10/dvr-tvt-directory-traversal.html
- http://www.exploit-db.com/exploits/29959
- http://www.kb.cert.org/vuls/id/785838
- http://www.securityfocus.com/bid/63360