CVE-2024-7339 PoC — TVT DVR TD-2104TS-C 和 TD-2108TS-HP 信息泄露漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7339.yaml

Associated Vulnerability

Title:TVT DVR TD-2104TS-C 和 TD-2108TS-HP 信息泄露漏洞 (CVE-2024-7339)
Description:TVT DVR TD-2104TS-CL和TVT DVR TD-2108TS-HP都是中国同为（TVT）公司的一款视频录像机。 TVT DVR TD-2104TS-C 和 TD-2108TS-HP 存在信息泄露漏洞，该漏洞源于访问控制不足，允许未经授权泄露敏感设备信息。

Description

A vulnerability has been found in TVT DVR TD-2104TS-CL, DVR TD-2108TS-HP, Provision-ISR DVR SH-4050A5-5L(MM) and AVISION DVR AV108T and classified as problematic. This vulnerability affects unknown code of the file /queryDevInfo. The manipulation leads to information disclosure.

File Snapshot


 id: CVE-2024-7339

info:
  name: TVT DVR Sensitive Device - Information Disclosure
  author: Stuxctf

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!