CVE-2024-14007 TVT NVMS-9000 < 1.3.4 Unauthenticated Administrative Queries & Information Disclosure
Unauthenticated remote attackers can bypass authentication to retrieve sensitive configuration data and cleartext credentials from TVT NVMS-9000 devices.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-14007?
CVE-2024-14007 is a high-severity authentication bypass vulnerability in Shenzhen TVT Digital Technology Co., Ltd. NVMS-9000, published on 24 Nov 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Shenzhen TVT Digital Technology Co., Ltd. NVMS-9000 firmware (used by many white-labeled DVR/NVR/IPC products) versions prior to 1.3.4 contain an authentication bypass in the NVMS-9000 control protocol. By sending a single crafted TCP payload to an exposed NVMS-9000 control port, an unauthenticated remote attacker can invoke privileged administrative query commands without valid credentials. Successful exploitation discloses sensitive information including administrator usernames and passwords in cleartext, network and service configuration, and other device details via commands such as queryBasicCfg, queryUserList, queryEmailCfg, queryPPPoECfg, and queryFTPCfg.
Weakness: CWE-306
Which versions are affected by CVE-2024-14007?
How do I fix CVE-2024-14007?
No fix has been published for CVE-2024-14007 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2024-14007 being exploited?
There is no known exploitation of CVE-2024-14007 in the wild and no public exploit code.
Sources
Also known as GHSA-3qf4-5xvv-769w.