CVE-2024-7339 - TVT DVR TD-2104TS-CL queryDevInfo information disclosure

Back Back to CVE browser

MEDIUM

TVT DVR TD-2104TS-CL queryDevInfo information disclosure

Published Aug 1, 2024

6.9

MEDIUM

CVSS 4.0

EPSS 32.03%

Description

A vulnerability has been found in TVT DVR TD-2104TS-CL, DVR TD-2108TS-HP, Provision-ISR DVR SH-4050A5-5L(MM) and AVISION DVR AV108T and classified as problematic. This vulnerability affects unknown code of the file /queryDevInfo. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-273262 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Vendor TVT Product Avision Dvr Av108t Default
n/a
- Version
  1.3.3.20657B180918.D06.U2(4A41T)
  Status
  affected
  Constraints
  -
- Version
  1.3.4.22966B181219.D00.U1(4A21S)
  Status
  affected
  Constraints
  -
- Version
  1.3.4.22966B181219.D14.U1(8A41T)
  Status
  affected
  Constraints
  -
- Version
  1.3.4.22966B181219.D44.U1(16A82T)
  Status
  affected
  Constraints
  -
- Version
  1.3.4.24513B190218.D00.U1(8A21S)
  Status
  affected
  Constraints
  -
- Version
  1.3.4.24879B190222.D00.U2(8A21S)
  Status
  affected
  Constraints
  -
Vendor TVT Product Dvr TD-2104ts-CL Default
n/a
- Version
  1.3.3.20657B180918.D06.U2(4A41T)
  Status
  affected
  Constraints
  -
- Version
  1.3.4.22966B181219.D00.U1(4A21S)
  Status
  affected
  Constraints
  -
- Version
  1.3.4.22966B181219.D14.U1(8A41T)
  Status
  affected
  Constraints
  -
- Version
  1.3.4.22966B181219.D44.U1(16A82T)
  Status
  affected
  Constraints
  -
- Version
  1.3.4.24513B190218.D00.U1(8A21S)
  Status
  affected
  Constraints
  -
- Version
  1.3.4.24879B190222.D00.U2(8A21S)
  Status
  affected
  Constraints
  -
Vendor TVT Product Dvr TD-2108ts-HP Default
n/a
- Version
  1.3.3.20657B180918.D06.U2(4A41T)
  Status
  affected
  Constraints
  -
- Version
  1.3.4.22966B181219.D00.U1(4A21S)
  Status
  affected
  Constraints
  -
- Version
  1.3.4.22966B181219.D14.U1(8A41T)
  Status
  affected
  Constraints
  -
- Version
  1.3.4.22966B181219.D44.U1(16A82T)
  Status
  affected
  Constraints
  -
- Version
  1.3.4.24513B190218.D00.U1(8A21S)
  Status
  affected
  Constraints
  -
- Version
  1.3.4.24879B190222.D00.U2(8A21S)
  Status
  affected
  Constraints
  -
Vendor TVT Product Provision-ISR DVR SH-4050A5-5L(MM) Default
n/a
- Version
  1.3.3.20657B180918.D06.U2(4A41T)
  Status
  affected
  Constraints
  -
- Version
  1.3.4.22966B181219.D00.U1(4A21S)
  Status
  affected
  Constraints
  -
- Version
  1.3.4.22966B181219.D14.U1(8A41T)
  Status
  affected
  Constraints
  -
- Version
  1.3.4.22966B181219.D44.U1(16A82T)
  Status
  affected
  Constraints
  -
- Version
  1.3.4.24513B190218.D00.U1(8A21S)
  Status
  affected
  Constraints
  -
- Version
  1.3.4.24879B190222.D00.U2(8A21S)
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

TVT

Avision Dvr Av108t

n/a

Version	Status	Constraints
1.3.3.20657B180918.D06.U2(4A41T)	affected	-
1.3.4.22966B181219.D00.U1(4A21S)	affected	-
1.3.4.22966B181219.D14.U1(8A41T)	affected	-
1.3.4.22966B181219.D44.U1(16A82T)	affected	-
1.3.4.24513B190218.D00.U1(8A21S)	affected	-
1.3.4.24879B190222.D00.U2(8A21S)	affected	-

TVT

Dvr TD-2104ts-CL

n/a

Version	Status	Constraints
1.3.3.20657B180918.D06.U2(4A41T)	affected	-
1.3.4.22966B181219.D00.U1(4A21S)	affected	-
1.3.4.22966B181219.D14.U1(8A41T)	affected	-
1.3.4.22966B181219.D44.U1(16A82T)	affected	-
1.3.4.24513B190218.D00.U1(8A21S)	affected	-
1.3.4.24879B190222.D00.U2(8A21S)	affected	-

TVT

Dvr TD-2108ts-HP

n/a

Version	Status	Constraints
1.3.3.20657B180918.D06.U2(4A41T)	affected	-
1.3.4.22966B181219.D00.U1(4A21S)	affected	-
1.3.4.22966B181219.D14.U1(8A41T)	affected	-
1.3.4.22966B181219.D44.U1(16A82T)	affected	-
1.3.4.24513B190218.D00.U1(8A21S)	affected	-
1.3.4.24879B190222.D00.U2(8A21S)	affected	-

TVT

Provision-ISR DVR SH-4050A5-5L(MM)

n/a

Version	Status	Constraints
1.3.3.20657B180918.D06.U2(4A41T)	affected	-
1.3.4.22966B181219.D00.U1(4A21S)	affected	-
1.3.4.22966B181219.D14.U1(8A41T)	affected	-
1.3.4.22966B181219.D44.U1(16A82T)	affected	-
1.3.4.24513B190218.D00.U1(8A21S)	affected	-
1.3.4.24879B190222.D00.U2(8A21S)	affected	-

Vendor Tvt Product Avision Dvr Av108t Default
n/a
- Version
  1.3.3.20657B180918.D06.U2\/4A41T\/
  Status
  affected
  Constraints
  -
- Version
  1.3.4.22966B181219.D00.U\/(4A21S\/
  Status
  affected
  Constraints
  -
- Version
  1.3.4.22966B181219.D14.U1\/8A41T\/
  Status
  affected
  Constraints
  -
- Version
  1.3.4.22966B181219.D44.U1\/16A82T\/
  Status
  affected
  Constraints
  -
- Version
  1.3.4.24513B190218.D00.U\/8A21S\/
  Status
  affected
  Constraints
  -
- Version
  1.3.4.24879B190222.D00.U2\/8A21S\/
  Status
  affected
  Constraints
  -
Vendor Tvt Product Dvr TD 2014ts CL Default
n/a
- Version
  1.3.3.20657B180918.D06.U2\/4A41T\/
  Status
  affected
  Constraints
  -
- Version
  1.3.4.22966B181219.D00.U1\/4A21S\/
  Status
  affected
  Constraints
  -
- Version
  1.3.4.22966B181219.D14.U1\/8A41T\/
  Status
  affected
  Constraints
  -
- Version
  1.3.4.22966B181219.D44.U1\/16A82T\/
  Status
  affected
  Constraints
  -
- Version
  1.3.4.24513B190218.D00.U1\/8A21S\/
  Status
  affected
  Constraints
  -
- Version
  1.3.4.24879B190222.D00.U2\/8A21S\/
  Status
  affected
  Constraints
  -
Vendor Tvt Product Dvr TD 2018ts HP Default
n/a
- Version
  1.3.3.20657B180918.D06.U2\/4A41T\/
  Status
  affected
  Constraints
  -
- Version
  1.3.4.22966B181219.D00.U1\/4A21S\/
  Status
  affected
  Constraints
  -
- Version
  1.3.4.22966B181219.D14.U1\/8A41T\/
  Status
  affected
  Constraints
  -
- Version
  1.3.4.22966B181219.D44.U1\/16A82T\/
  Status
  affected
  Constraints
  -
- Version
  1.3.4.24513B190218.D00.U\/(8A21S\/
  Status
  affected
  Constraints
  -
- Version
  1.3.4.24879B190222.D00.U2\/8A21S\/
  Status
  affected
  Constraints
  -
Vendor Tvt Product Provision Isr Dvr SH 4050a5 5l\/mm\/ Default
n/a
- Version
  1.3.3.20657B180918.D06.U2\/4A41T\/
  Status
  affected
  Constraints
  -
- Version
  1.3.4.22966B181219.D00.U\/(4A21S\/
  Status
  affected
  Constraints
  -
- Version
  1.3.4.22966B181219.D14.U1\/8A41T\/
  Status
  affected
  Constraints
  -
- Version
  1.3.4.22966B181219.D44.U1\/16A82T\/
  Status
  affected
  Constraints
  -
- Version
  1.3.4.24513B190218.D00.U1\/8A21S\/
  Status
  affected
  Constraints
  -
- Version
  1.3.4.24879B190222.D00.U2\/8A21S\/
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Tvt

Avision Dvr Av108t

n/a

Version	Status	Constraints
1.3.3.20657B180918.D06.U2\/4A41T\/	affected	-
1.3.4.22966B181219.D00.U\/(4A21S\/	affected	-
1.3.4.22966B181219.D14.U1\/8A41T\/	affected	-
1.3.4.22966B181219.D44.U1\/16A82T\/	affected	-
1.3.4.24513B190218.D00.U\/8A21S\/	affected	-
1.3.4.24879B190222.D00.U2\/8A21S\/	affected	-

Tvt

Dvr TD 2014ts CL

n/a

Version	Status	Constraints
1.3.3.20657B180918.D06.U2\/4A41T\/	affected	-
1.3.4.22966B181219.D00.U1\/4A21S\/	affected	-
1.3.4.22966B181219.D14.U1\/8A41T\/	affected	-
1.3.4.22966B181219.D44.U1\/16A82T\/	affected	-
1.3.4.24513B190218.D00.U1\/8A21S\/	affected	-
1.3.4.24879B190222.D00.U2\/8A21S\/	affected	-

Tvt

Dvr TD 2018ts HP

n/a

Version	Status	Constraints
1.3.3.20657B180918.D06.U2\/4A41T\/	affected	-
1.3.4.22966B181219.D00.U1\/4A21S\/	affected	-
1.3.4.22966B181219.D14.U1\/8A41T\/	affected	-
1.3.4.22966B181219.D44.U1\/16A82T\/	affected	-
1.3.4.24513B190218.D00.U\/(8A21S\/	affected	-
1.3.4.24879B190222.D00.U2\/8A21S\/	affected	-

Tvt

Provision Isr Dvr SH 4050a5 5l\/mm\/

n/a

Version	Status	Constraints
1.3.3.20657B180918.D06.U2\/4A41T\/	affected	-
1.3.4.22966B181219.D00.U\/(4A21S\/	affected	-
1.3.4.22966B181219.D14.U1\/8A41T\/	affected	-
1.3.4.22966B181219.D44.U1\/16A82T\/	affected	-
1.3.4.24513B190218.D00.U1\/8A21S\/	affected	-
1.3.4.24879B190222.D00.U2\/8A21S\/	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-48278
Advisory
https://netsecfish.notion.site/Sensitive-Device-Information-Disclosure-in-TVT-DVR-fad1cce703d946969be5130bf3aaac0d?pvs=4
exploitThird Party Advisory
https://vuldb.com/?ctiid.273262
signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.273262
vdb-entryPermissions RequiredVDB Entry
https://vuldb.com/?submit.379373
third-party-advisoryThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-48278		Advisory
https://netsecfish.notion.site/Sensitive-Device-Information-Disclosure-in-TVT-DVR-fad1cce703d946969be5130bf3aaac0d?pvs=4		exploitThird Party Advisory
https://vuldb.com/?ctiid.273262		signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.273262		vdb-entryPermissions RequiredVDB Entry
https://vuldb.com/?submit.379373		third-party-advisoryThird Party AdvisoryVDB Entry