TVT records
4 published records for vendor tvt.
Researcher profile
- Entered KEV
- 1 · 25%
- Weaponized
- 1 · 25%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- 675 days
Recurring classes
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
89Now | CVE-2019-20085Weaponized | TVT NVMS-1000 devices allow GET /..tvt · nvms-1000 firmware · CWE-22 | High7.5 | KEV | 96.0% | Dec 29, 2019 |
49Plan | CVE-2025-34036No exploit | Shenzhen TVT CCTV-DVR Command Injectiontvt · td-2108ts-cl firmware · CWE-78 | Critical10.0 | — | 30.9% | Jun 23, 2025 |
37Monitor | CVE-2024-7339Proof of concept | TVT DVR TD-2104TS-CL queryDevInfo information disclosureprovision-isr · sh-4050a5-5l\(mm\) firmware · CWE-200 | Medium6.9 | — | 32.0% | Aug 1, 2024 |
34Monitor | CVE-2013-6023Proof of concept | Directory traversal vulnerability in the TVT TD-2308SS-B DVR with firmware 3.2.0.P-3520A-00 and earlier allows remote attackers to read arbitvt · dvr · CWE-22 | High7.8 | — | 10.2% | Nov 2, 2013 |
- CVE-2019-2008589Now
TVT NVMS-1000 devices allow GET /..
HighCVSS 7.5KEVWeaponizedEPSS 96%tvt · nvms-1000 firmwareDec 29, 2019
- CVE-2025-3403649Plan
Shenzhen TVT CCTV-DVR Command Injection
CriticalCVSS 10.0No exploitEPSS 30%tvt · td-2108ts-cl firmwareJun 23, 2025
- CVE-2024-733937Monitor
TVT DVR TD-2104TS-CL queryDevInfo information disclosure
MediumCVSS 6.9Proof of conceptEPSS 32%provision-isr · sh-4050a5-5l\(mm\) firmwareAug 1, 2024
- CVE-2013-602334Monitor
Directory traversal vulnerability in the TVT TD-2308SS-B DVR with firmware 3.2.0.P-3520A-00 and earlier allows remote attackers to read arbi
HighCVSS 7.8Proof of conceptEPSS 10%tvt · dvrNov 2, 2013