Patchfirst
CVE-2024-7339 Public exploit Medium · 5.3 EPSS 32.0%

TVT DVR TD-2104TS-CL queryDevInfo information disclosure

TVT · DVR TD-2104TS-CL

Official description · CVE.org

A vulnerability has been found in TVT DVR TD-2104TS-CL, DVR TD-2108TS-HP, Provision-ISR DVR SH-4050A5-5L(MM) and AVISION DVR AV108T and classified as problematic. This vulnerability affects unknown code of the file /queryDevInfo. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-273262 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Breakdown
63.4 / 100
Exploited
Yes, in VulnCheck KEV
Reports
0
Tactics
0/15

First seen exploited 44 days after disclosure. Public exploit code (PoC-in-GitHub) appeared 4 days after disclosure.

  1. Disclosedday 0
  2. Public exploit codePoC-in-GitHub+4 days
  3. First seen exploitedVulnCheck KEV evidence+44 days

techniques

No techniques linked

No ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.

What security researchers reported

Not named in any threat report yet

References

4 links, grouped by NVD tag
↑ ↓ chooseEnter openEsc close