漏洞描述
【漏洞对象】TVT DVR 【涉及版本】config.dat 【漏洞描述】 TVT TD-2308SS-BDVR和可能运行固件版本的其他型号3.2.0.P-3520A-00包含目录遍历漏洞。袭击者可以使用目录遍历下载关键文件，如包含web凭据的设备的config.dat文件接口。
TVT DVR config.dat-敏感信息泄漏
PoC代码
暂无相关漏洞推荐
- POC CVE-2021-41419: QVIS NVR/DVR - Remote Code Execution
- POC CVE-2018-15745: Argus Surveillance DVR 4.0.0.0 - Local File Inclusion
- POC CVE-2018-9995: TBK DVR4104/DVR4216 Devices - Authentication Bypass
- POC CVE-2021-42071: Visual Tools DVR VX16 4.2.28.0 - Unauthenticated OS Command Injection
- POC CVE-2024-7339: TVT DVR Sensitive Device - Information Disclosure
- POC CVE-2018-9995: DVR Authentication Bypass
- POC avtech-dvr-exposure: Avtech AVC798HA DVR Information Exposure
- POC CVE-2013-4982: AVTECH DVR - Login Verification Code Bypass
- POC avtech-dvr-exposure: AVTECH AVC798HA DVR - Information Exposure
- POC qvisdvr-deserialization-rce: QVISDVR JSF Deserialization - Remote Code Execution
- POC intelbras-dvr-unauth: Intelbras DVR - Unrestricted Access
- POC avtech-dvr-ssrf: AVTECH DVR - SSRF
- POC commax-credentials-disclosure: COMMAX Smart Home Ruvie CCTV Bridge DVR - RTSP Credentials Disclosure