CVE-2019-20085 – TVT NVMS-1000 Directory Traversal Vulnerability

https://notcve.org/view.php?id=CVE-2019-20085

30 Dec 2019 — TVT NVMS-1000 devices allow GET /.. Directory Traversal Los dispositivos TVT NVMS-1000, permiten un Salto de Directorio de GET /.. TVT NVMS 1000 suffers from a directory traversal vulnerability. TVT devices utilizing NVMS-1000 software contain a directory traversal vulnerability via GET /.. requests. • https://www.exploit-db.com/exploits/48311 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •