CVE-2019-20085
Published: 30 December 2019
Summary
CVE-2019-20085 is a high-severity Path Traversal (CWE-22) vulnerability in Tvt Nvms-1000 Firmware. Its CVSS base score is 7.5 (High).
Operationally, ranked in the top 0.1% of CVEs by exploit likelihood; CISA has added it to the Known Exploited Vulnerabilities catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 AC-3 (Access Enforcement) and SI-10 (Information Input Validation).
Deeper analysis
TVT NVMS-1000 devices are affected by a directory traversal vulnerability, CVE-2019-20085, that permits GET requests containing /.. sequences to access restricted paths. The flaw is categorized as CWE-22 and is rated 7.5 on CVSS 3.1, reflecting network attack vector, low complexity, and high confidentiality impact without requiring authentication or user interaction.
Unauthenticated remote attackers can exploit the issue to read arbitrary files on affected devices, resulting in disclosure of sensitive configuration or operational data.
Public exploit code has been published on Exploit-DB and Packet Storm, and the vulnerability appears in the CISA Known Exploited Vulnerabilities catalog, confirming observed in-the-wild use. No vendor mitigation details are provided in the referenced sources.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2019-10641
Vulnerability details
TVT NVMS-1000 devices allow GET /.. Directory Traversal
- CWE(s)
- KEV Date Added
- 03 November 2021
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Validates and sanitizes GET request paths to block .. sequences that enable unauthorized file access.
Enforces access control policies so that unauthenticated requests cannot reach restricted file paths.
Applies boundary filtering rules to drop malicious directory-traversal requests before they reach the device.