Submit #379373: TVT TD-2104TS-CL, TD-2108TS-HP, SH-4050A5-5L(MM), AV108T, ... 1.3.4.22966B181219.D00.U1(4A21S), 1.3.4.22966B181219.D14.U1(8A41T), 1.3.4.22966B181219.D44.U1(16A82T), 1.3.4.24513B190218.D00.U1 Information Disclosureinfo

TitleTVT TD-2104TS-CL, TD-2108TS-HP, SH-4050A5-5L(MM), AV108T, ... 1.3.4.22966B181219.D00.U1(4A21S), 1.3.4.22966B181219.D14.U1(8A41T), 1.3.4.22966B181219.D44.U1(16A82T), 1.3.4.24513B190218.D00.U1 Information Disclosure
DescriptionA security vulnerability has been identified in multiple DVR devices including TVT DVR models TD-2104TS-CL and TD-2108TS-HP, Provision-ISR DVR SH-4050A5-5L(MM), AVISION DVR AV108T and etc.. This vulnerability allows unauthorized disclosure of sensitive device information due to insufficient access controls on the device's web server, affecting over 408,035 devices on the Internet.
Source⚠️ https://netsecfish.notion.site/Sensitive-Device-Information-Disclosure-in-TVT-DVR-fad1cce703d946969be5130bf3aaac0d?pvs=4
User netsecfish (UID 64568)
Submission07/23/2024 20:41 (2 years ago)
Moderation07/31/2024 14:35 (8 days later)
StatusAccepted
VulDB entry273262 [TVT DVR TD-2104TS-CL up to 1.3.4.24879B190222.D00.U2(8A21S) /queryDevInfo information disclosure]
Points16

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!