Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2024-7339
PUBLISHED
More InfoOfficial Page
Assigner-VulDB
Assigner Org ID-1af790b2-7ee1-4545-860a-a788eba489b5
View Known Exploited Vulnerability (KEV) details
Published At-01 Aug, 2024 | 04:00
Updated At-07 Aug, 2024 | 14:31
Rejected At-
▼CVE Numbering Authority (CNA)
TVT DVR TD-2104TS-CL queryDevInfo information disclosure

A vulnerability has been found in TVT DVR TD-2104TS-CL, DVR TD-2108TS-HP, Provision-ISR DVR SH-4050A5-5L(MM) and AVISION DVR AV108T and classified as problematic. This vulnerability affects unknown code of the file /queryDevInfo. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-273262 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected Products
Vendor
TVT
Product
DVR TD-2104TS-CL
Versions
Affected
  • 1.3.3.20657B180918.D06.U2(4A41T)
  • 1.3.4.22966B181219.D00.U1(4A21S)
  • 1.3.4.22966B181219.D14.U1(8A41T)
  • 1.3.4.22966B181219.D44.U1(16A82T)
  • 1.3.4.24513B190218.D00.U1(8A21S)
  • 1.3.4.24879B190222.D00.U2(8A21S)
Vendor
TVT
Product
DVR TD-2108TS-HP
Versions
Affected
  • 1.3.3.20657B180918.D06.U2(4A41T)
  • 1.3.4.22966B181219.D00.U1(4A21S)
  • 1.3.4.22966B181219.D14.U1(8A41T)
  • 1.3.4.22966B181219.D44.U1(16A82T)
  • 1.3.4.24513B190218.D00.U1(8A21S)
  • 1.3.4.24879B190222.D00.U2(8A21S)
Vendor
TVT
Product
Provision-ISR DVR SH-4050A5-5L(MM)
Versions
Affected
  • 1.3.3.20657B180918.D06.U2(4A41T)
  • 1.3.4.22966B181219.D00.U1(4A21S)
  • 1.3.4.22966B181219.D14.U1(8A41T)
  • 1.3.4.22966B181219.D44.U1(16A82T)
  • 1.3.4.24513B190218.D00.U1(8A21S)
  • 1.3.4.24879B190222.D00.U2(8A21S)
Vendor
TVT
Product
AVISION DVR AV108T
Versions
Affected
  • 1.3.3.20657B180918.D06.U2(4A41T)
  • 1.3.4.22966B181219.D00.U1(4A21S)
  • 1.3.4.22966B181219.D14.U1(8A41T)
  • 1.3.4.22966B181219.D44.U1(16A82T)
  • 1.3.4.24513B190218.D00.U1(8A21S)
  • 1.3.4.24879B190222.D00.U2(8A21S)
Problem Types
TypeCWE IDDescription
CWECWE-200CWE-200 Information Disclosure
Type: CWE
CWE ID: CWE-200
Description: CWE-200 Information Disclosure
Metrics
VersionBase scoreBase severityVector
4.06.9MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
3.15.3MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
3.05.3MEDIUM
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
2.05.0N/A
AV:N/AC:L/Au:N/C:P/I:N/A:N
Version: 4.0
Base score: 6.9
Base severity: MEDIUM
Vector:
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Version: 3.1
Base score: 5.3
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Version: 3.0
Base score: 5.3
Base severity: MEDIUM
Vector:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Version: 2.0
Base score: 5.0
Base severity: N/A
Vector:
AV:N/AC:L/Au:N/C:P/I:N/A:N
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
reporter
netsecfish (VulDB User)
Timeline
EventDate
Advisory disclosed2024-07-31 00:00:00
VulDB entry created2024-07-31 02:00:00
VulDB entry last update2024-07-31 14:40:33
Event: Advisory disclosed
Date: 2024-07-31 00:00:00
Event: VulDB entry created
Date: 2024-07-31 02:00:00
Event: VulDB entry last update
Date: 2024-07-31 14:40:33
Replaced By
Rejected Reason
References
HyperlinkResource
https://vuldb.com/?id.273262
vdb-entry
https://vuldb.com/?ctiid.273262
signature
permissions-required
https://vuldb.com/?submit.379373
third-party-advisory
https://netsecfish.notion.site/Sensitive-Device-Information-Disclosure-in-TVT-DVR-fad1cce703d946969be5130bf3aaac0d?pvs=4
exploit
Hyperlink: https://vuldb.com/?id.273262
Resource:
vdb-entry
Hyperlink: https://vuldb.com/?ctiid.273262
Resource:
signature
permissions-required
Hyperlink: https://vuldb.com/?submit.379373
Resource:
third-party-advisory
Hyperlink: https://netsecfish.notion.site/Sensitive-Device-Information-Disclosure-in-TVT-DVR-fad1cce703d946969be5130bf3aaac0d?pvs=4
Resource:
exploit
▼Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Vendor
tvt
Product
dvr_td_2014ts_cl
CPEs
  • cpe:2.3:a:tvt:dvr_td_2014ts_cl:*:*:*:*:*:*:*:*
Default Status
unknown
Versions
Affected
  • 1.3.3.20657B180918.D06.U2\/4A41T\/
  • 1.3.4.22966B181219.D00.U1\/4A21S\/
  • 1.3.4.22966B181219.D14.U1\/8A41T\/
  • 1.3.4.22966B181219.D44.U1\/16A82T\/
  • 1.3.4.24513B190218.D00.U1\/8A21S\/
Vendor
tvt
Product
dvr_td_2018ts_hp
CPEs
  • cpe:2.3:a:tvt:dvr_td_2018ts_hp:*:*:*:*:*:*:*:*
Default Status
unknown
Versions
Affected
  • 1.3.3.20657B180918.D06.U2\/4A41T\/
  • 1.3.4.22966B181219.D00.U1\/4A21S\/
  • 1.3.4.22966B181219.D14.U1\/8A41T\/
  • 1.3.4.22966B181219.D44.U1\/16A82T\/
Vendor
tvt
Product
provision_isr_dvr_sh_4050a5_5l\/mm\/
CPEs
  • cpe:2.3:a:tvt:provision_isr_dvr_sh_4050a5_5l\/mm\/:*:*:*:*:*:*:*:*
Default Status
unknown
Versions
Affected
  • 1.3.3.20657B180918.D06.U2\/4A41T\/
Vendor
tvt
Product
dvr_td_2014ts_cl
CPEs
  • cpe:2.3:a:tvt:dvr_td_2014ts_cl:*:*:*:*:*:*:*:*
Default Status
unknown
Versions
Affected
  • 1.3.4.24879B190222.D00.U2\/8A21S\/
Vendor
tvt
Product
dvr_td_2018ts_hp
CPEs
  • cpe:2.3:a:tvt:dvr_td_2018ts_hp:*:*:*:*:*:*:*:*
Default Status
unknown
Versions
Affected
  • 1.3.4.24513B190218.D00.U\/(8A21S\/
  • 1.3.4.24879B190222.D00.U2\/8A21S\/
Vendor
tvt
Product
provision_isr_dvr_sh_4050a5_5l\/mm\/
CPEs
  • cpe:2.3:a:tvt:provision_isr_dvr_sh_4050a5_5l\/mm\/:*:*:*:*:*:*:*:*
Default Status
unknown
Versions
Affected
  • 1.3.4.22966B181219.D00.U\/(4A21S\/
  • 1.3.4.22966B181219.D14.U1\/8A41T\/
  • 1.3.4.22966B181219.D44.U1\/16A82T\/
  • 1.3.4.24513B190218.D00.U1\/8A21S\/
  • 1.3.4.24879B190222.D00.U2\/8A21S\/
Vendor
tvt
Product
avision_dvr_av108t
CPEs
  • cpe:2.3:a:tvt:avision_dvr_av108t:*:*:*:*:*:*:*:*
Default Status
unknown
Versions
Affected
  • 1.3.3.20657B180918.D06.U2\/4A41T\/
  • 1.3.4.22966B181219.D00.U\/(4A21S\/
  • 1.3.4.22966B181219.D14.U1\/8A41T\/
  • 1.3.4.22966B181219.D44.U1\/16A82T\/
  • 1.3.4.24513B190218.D00.U\/8A21S\/
  • 1.3.4.24879B190222.D00.U2\/8A21S\/
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
Details not found