CVE-2019-20085
TVT NVMS-1000 Directory Traversal Vulnerability
Published Dec 29, 2019 · updated Jun 16, 2026 · tvt nvms-1000 firmware
TVT devices utilizing NVMS-1000 software contain a directory traversal vulnerability via GET /.. requests.
Timeline
Detection, updates, and resolution for this record.
Dec 29, 2019 · Catalog
Detected
TVT devices utilizing NVMS-1000 software contain a directory traversal vulnerability via GET /.. requests.
Nov 3, 2021 · CISA KEV
Known exploited
Apply updates per vendor instructions.
May 3, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
TVT devices utilizing NVMS-1000 software contain a directory traversal vulnerability via GET /.. requests.
Required action
Apply updates per vendor instructions.
CISA due date May 3, 2022
Affected
- cpe tvt/nvms-1000 firmwareversion unspecified
- vendor TVT NVMS-1000version unspecified
Sources
- CISA KEVCVE-2019-20085
TVT devices utilizing NVMS-1000 software contain a directory traversal vulnerability via GET /.. requests.
cisa.gov - CVE.orgCVE-2019-20085
Official CVE identifier
cve.org - FIRST EPSSCVE-2019-20085
30-day exploitation probability 96.1%
first.org - Exploit Database48311
Public archive entry. The exploit body is not stored here.
exploit-db.com - Metasploit Modulesauxiliary_scanner/http/tvt_nvms_traversal
Public module reference (normal). Module source is not copied into this catalog.
rapid7.com - NIST NVDCVE-2019-20085
TVT NVMS-1000 devices allow GET /.. Directory Traversal
nvd.nist.gov - Packet Storm Securityhttp://packetstormsecurity.com/files/157196/TVT-NVMS-1000-Directory-Traversal.html
Packet Storm link already published on the finding.
packetstormsecurity.com