CVE-2013-6023

TVT TD-2308SS-B DVR - Directory Traversal

Severity Score

7.8

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Directory traversal vulnerability in the TVT TD-2308SS-B DVR with firmware 3.2.0.P-3520A-00 and earlier allows remote attackers to read arbitrary files via .. (dot dot) in the URI.

Vulnerabilidad de salto de directorio en el DVR TVT TD-2308SS-B con firmware 3.2.0.P-3520A-00 y anteriores permite a atacantes remotos leer archivos de su elección a través de .. (punto punto) en el URI.

TVT TD-2308SS-B DVR suffers from a directory traversal vulnerability.

*Credits: N/A

CVSS Scores

NISTv2 7.8

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Complete

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2013-10-04 CVE Reserved
2013-11-02 CVE Published
2013-12-01 First Exploit
2024-05-20 EPSS Updated
2024-08-06 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CAPEC

References (5)

URL	Tag	Source
http://alguienenlafisi.blogspot.com/2013/10/dvr-tvt-directory-traversal.html	X_refsource_misc
http://www.kb.cert.org/vuls/id/785838	Third Party Advisory

URL	Date	SRC
https://www.exploit-db.com/exploits/29959	2013-12-01
http://www.exploit-db.com/exploits/29959	2024-08-06
http://www.securityfocus.com/bid/63360	2024-08-06

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Tvt Search vendor "Tvt"	Dvr Search vendor "Tvt" for product "Dvr"	td-2308ss-b Search vendor "Tvt" for product "Dvr" and version "td-2308ss-b"	-	Affected	in	Tvt Search vendor "Tvt"	Dvr Firmware Search vendor "Tvt" for product "Dvr Firmware"	<= 3.2.0.p-3520a-03 Search vendor "Tvt" for product "Dvr Firmware" and version " <= 3.2.0.p-3520a-03"	-	Affected
Tvt Search vendor "Tvt"	Dvr Search vendor "Tvt" for product "Dvr"	td-2308ss-b Search vendor "Tvt" for product "Dvr" and version "td-2308ss-b"	-	Affected	in	Tvt Search vendor "Tvt"	Dvr Firmware Search vendor "Tvt" for product "Dvr Firmware"	3.1.6.p-1.0.2.1-03 Search vendor "Tvt" for product "Dvr Firmware" and version "3.1.6.p-1.0.2.1-03"	-	Affected
Tvt Search vendor "Tvt"	Dvr Search vendor "Tvt" for product "Dvr"	td-2308ss-b Search vendor "Tvt" for product "Dvr" and version "td-2308ss-b"	-	Affected	in	Tvt Search vendor "Tvt"	Dvr Firmware Search vendor "Tvt" for product "Dvr Firmware"	3.1.7.b-1.0.2.1-00 Search vendor "Tvt" for product "Dvr Firmware" and version "3.1.7.b-1.0.2.1-00"	-	Affected
Tvt Search vendor "Tvt"	Dvr Search vendor "Tvt" for product "Dvr"	td-2308ss-b Search vendor "Tvt" for product "Dvr" and version "td-2308ss-b"	-	Affected	in	Tvt Search vendor "Tvt"	Dvr Firmware Search vendor "Tvt" for product "Dvr Firmware"	3.1.43.b Search vendor "Tvt" for product "Dvr Firmware" and version "3.1.43.b"	-	Affected
Tvt Search vendor "Tvt"	Dvr Search vendor "Tvt" for product "Dvr"	td-2308ss-b Search vendor "Tvt" for product "Dvr" and version "td-2308ss-b"	-	Affected	in	Tvt Search vendor "Tvt"	Dvr Firmware Search vendor "Tvt" for product "Dvr Firmware"	3.1.43.p Search vendor "Tvt" for product "Dvr Firmware" and version "3.1.43.p"	-	Affected
Tvt Search vendor "Tvt"	Dvr Search vendor "Tvt" for product "Dvr"	td-2308ss-b Search vendor "Tvt" for product "Dvr" and version "td-2308ss-b"	-	Affected	in	Tvt Search vendor "Tvt"	Dvr Firmware Search vendor "Tvt" for product "Dvr Firmware"	3.1.75.b-1.0.2.1-00 Search vendor "Tvt" for product "Dvr Firmware" and version "3.1.75.b-1.0.2.1-00"	-	Affected
Tvt Search vendor "Tvt"	Dvr Search vendor "Tvt" for product "Dvr"	td-2308ss-b Search vendor "Tvt" for product "Dvr" and version "td-2308ss-b"	-	Affected	in	Tvt Search vendor "Tvt"	Dvr Firmware Search vendor "Tvt" for product "Dvr Firmware"	3.1.81.b-1.0.2.1-00 Search vendor "Tvt" for product "Dvr Firmware" and version "3.1.81.b-1.0.2.1-00"	-	Affected
Tvt Search vendor "Tvt"	Dvr Search vendor "Tvt" for product "Dvr"	td-2308ss-b Search vendor "Tvt" for product "Dvr" and version "td-2308ss-b"	-	Affected	in	Tvt Search vendor "Tvt"	Dvr Firmware Search vendor "Tvt" for product "Dvr Firmware"	3.1.83.b-1.0.2.1-00 Search vendor "Tvt" for product "Dvr Firmware" and version "3.1.83.b-1.0.2.1-00"	-	Affected
Tvt Search vendor "Tvt"	Dvr Search vendor "Tvt" for product "Dvr"	td-2308ss-b Search vendor "Tvt" for product "Dvr" and version "td-2308ss-b"	-	Affected	in	Tvt Search vendor "Tvt"	Dvr Firmware Search vendor "Tvt" for product "Dvr Firmware"	3.1.83.p-1.0.4.2-03 Search vendor "Tvt" for product "Dvr Firmware" and version "3.1.83.p-1.0.4.2-03"	-	Affected
Tvt Search vendor "Tvt"	Dvr Search vendor "Tvt" for product "Dvr"	td-2308ss-b Search vendor "Tvt" for product "Dvr" and version "td-2308ss-b"	-	Affected	in	Tvt Search vendor "Tvt"	Dvr Firmware Search vendor "Tvt" for product "Dvr Firmware"	3.1.87.p-1.0.4.2-17 Search vendor "Tvt" for product "Dvr Firmware" and version "3.1.87.p-1.0.4.2-17"	-	Affected
Tvt Search vendor "Tvt"	Dvr Search vendor "Tvt" for product "Dvr"	td-2308ss-b Search vendor "Tvt" for product "Dvr" and version "td-2308ss-b"	-	Affected	in	Tvt Search vendor "Tvt"	Dvr Firmware Search vendor "Tvt" for product "Dvr Firmware"	3.1.91.p-1.0.2.1-03 Search vendor "Tvt" for product "Dvr Firmware" and version "3.1.91.p-1.0.2.1-03"	-	Affected
Tvt Search vendor "Tvt"	Dvr Search vendor "Tvt" for product "Dvr"	td-2308ss-b Search vendor "Tvt" for product "Dvr" and version "td-2308ss-b"	-	Affected	in	Tvt Search vendor "Tvt"	Dvr Firmware Search vendor "Tvt" for product "Dvr Firmware"	3.1.92.p-1.0.2.1-00 Search vendor "Tvt" for product "Dvr Firmware" and version "3.1.92.p-1.0.2.1-00"	-	Affected
Tvt Search vendor "Tvt"	Dvr Search vendor "Tvt" for product "Dvr"	td-2308ss-b Search vendor "Tvt" for product "Dvr" and version "td-2308ss-b"	-	Affected	in	Tvt Search vendor "Tvt"	Dvr Firmware Search vendor "Tvt" for product "Dvr Firmware"	3.1.93.b-1.0.2.1-17 Search vendor "Tvt" for product "Dvr Firmware" and version "3.1.93.b-1.0.2.1-17"	-	Affected
Tvt Search vendor "Tvt"	Dvr Search vendor "Tvt" for product "Dvr"	td-2308ss-b Search vendor "Tvt" for product "Dvr" and version "td-2308ss-b"	-	Affected	in	Tvt Search vendor "Tvt"	Dvr Firmware Search vendor "Tvt" for product "Dvr Firmware"	3.2.0.b-1.0.2.1-17 Search vendor "Tvt" for product "Dvr Firmware" and version "3.2.0.b-1.0.2.1-17"	-	Affected
Tvt Search vendor "Tvt"	Dvr Search vendor "Tvt" for product "Dvr"	td-2308ss-b Search vendor "Tvt" for product "Dvr" and version "td-2308ss-b"	-	Affected	in	Tvt Search vendor "Tvt"	Dvr Firmware Search vendor "Tvt" for product "Dvr Firmware"	3.2.0.p-1.0.2.1-03 Search vendor "Tvt" for product "Dvr Firmware" and version "3.2.0.p-1.0.2.1-03"	-	Affected
Tvt Search vendor "Tvt"	Dvr Search vendor "Tvt" for product "Dvr"	td-2308ss-b Search vendor "Tvt" for product "Dvr" and version "td-2308ss-b"	-	Affected	in	Tvt Search vendor "Tvt"	Dvr Firmware Search vendor "Tvt" for product "Dvr Firmware"	3.2.0.p-1.0.2.1-17 Search vendor "Tvt" for product "Dvr Firmware" and version "3.2.0.p-1.0.2.1-17"	-	Affected
Tvt Search vendor "Tvt"	Dvr Search vendor "Tvt" for product "Dvr"	td-2308ss-b Search vendor "Tvt" for product "Dvr" and version "td-2308ss-b"	-	Affected	in	Tvt Search vendor "Tvt"	Dvr Firmware Search vendor "Tvt" for product "Dvr Firmware"	3.2.0.p-1.0.6.0.32-00 Search vendor "Tvt" for product "Dvr Firmware" and version "3.2.0.p-1.0.6.0.32-00"	-	Affected