EUVD-2025-199001

🗓️ 24 Nov 2025 21:31:00Reported by EUVDType

Authentication bypass in firmware before 1.3.4 lets remote attackers obtain administrator credentials and device configuration via crafted queries.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2024-14007	24 Nov 202520:51	–	circl
CNNVD	TVT NVMS-9000 安全漏洞	24 Nov 202500:00	–	cnnvd
CVE	CVE-2024-14007	24 Nov 202520:31	–	cve
Cvelist	CVE-2024-14007 TVT NVMS-9000 < 1.3.4 Unauthenticated Administrative Queries & Information Disclosure	24 Nov 202520:31	–	cvelist
NVD	CVE-2024-14007	24 Nov 202521:16	–	nvd
Positive Technologies	PT-2025-47959	24 Nov 202500:00	–	ptsecurity
RedhatCVE	CVE-2024-14007	25 Nov 202520:56	–	redhatcve
VulnCheck KEV	VulnCheck KEV: CVE-2024-14007	24 Nov 202500:00	–	vulncheck_kev
Vulnrichment	CVE-2024-14007 TVT NVMS-9000 < 1.3.4 Unauthenticated Administrative Queries & Information Disclosure	24 Nov 202520:31	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "8d99b41d-381e-3e90-94b5-52255a5448e4",
        "vendor": {
          "name": "Shenzhen TVT Digital Technology Co., Ltd."
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "5ebfc823-1598-388d-a86f-c945fe375ef5",
        "product": {
          "name": "NVMS-9000"
        },
        "product_version": "0 <1.3.4"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-14007
ssd-disclosure	www.ssd-disclosure.com/ssd-advisory-nvms9000-information-disclosure
undercodetesting	www.undercodetesting.com/eleven11-botnet-mirai-variant-targeting-nvms-9000-devices
greynoise	www.greynoise.io/blog/surge-exploitation-attempts-tvt-dvrs
vulncheck	www.vulncheck.com/advisories/tvt-nvms9000-unauthenticated-admin-queries-and-information-disclosure
ssd-disclosure	www.ssd-disclosure.com/ssd-advisory-nvms9000-information-disclosure/
undercodetesting	www.undercodetesting.com/eleven11-botnet-mirai-variant-targeting-nvms-9000-devices/

24 Nov 2025 21:31Current

6.7Medium risk

Vulners AI Score6.7

CVSS 48.7

EPSS0.00769

SSVC