TVT TD-2308SS-B DVR and possibly other models contain a directory traversal vulnerability (CWE-22).
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
TVT TD-2308SS-B DVR and possibly other models running firmware version 3.2.0.P-3520A-00 contain a directory traversal vulnerability. An attacker can use directory traversal to download critical files such as the config.dat file for the device which contains the credentials for the web interface. For example:
A remote unauthenticated attacker can download the configuration file of the device and use the obtained administrator credentials to access the web interface. The attacker may then modify the settings of the device and have access to the connected cameras.
We are currently unaware of a practical solution to this problem. Please consider the following workaround.
Restrict access to the TVT DVR interface
Thanks to Cesar Neira for reporting this vulnerability.
This document was written by Adam Rauf.
|Date First Published:||2013-10-25|
|Date Last Updated:||2013-10-25 13:09 UTC|