Overview

A security vulnerability has been identified in multiple DVR devices including TVT DVR models TD-2104TS-CL and TD-2108TS-HP, Provision-ISR DVR SH-4050A5-5L(MM), AVISION DVR AV108T and etc.. This vulnerability allows unauthorized disclosure of sensitive device information due to insufficient access controls on the device's web server, affecting over 408,035 devices on the Internet.

Affected Devices

Hardware

• TVT DVR TD-2104TS-CL
• TVT DVR TD-2108TS-HP
• Provision-ISR DVR SH-4050A5-5L(MM)
• AVISION DVR AV108T
• …

NOTE:

Provision-ISR said it was "the mutual work of Provision-ISR and TVT". ProVision - ISR camera's

AVISION by TVT DVR AVISION by TVT DVR Archives | ARTION SECURITY SYSTEMS AE

SoftwareVersion

• 1.3.4.22966B181219.D00.U1(4A21S)
• 1.3.4.22966B181219.D14.U1(8A41T)
• 1.3.4.22966B181219.D44.U1(16A82T)
• 1.3.4.24513B190218.D00.U1(8A21S)
• 1.3.3.20657B180918.D06.U2(4A41T)
• 1.3.4.24879B190222.D00.U2(8A21S)