CVE-2013-6023

The TVT TD-2308SS-B DVR is vulnerable to a directory traversal vulnerability (CWE-22) in firmware version 3.2.0.P-3520A-00 and earlier. Remote, unauthenticated attackers can use .. (dot dot) sequences in the URI to read arbitrary files, such as the config.dat file. Accessing this file allows atta...