CVE-2024-14007

Shenzhen TVT Digital Technology Co., Ltd. NVMS-9000 firmware (used by many white-labeled DVR/NVR/IPC products) versions prior to 1.3.4 contain an authentication bypass in the NVMS-9000 control protocol. By sending a single crafted TCP payload to an exposed NVMS-9000 control port, an unauthenticated remote attacker can invoke privileged administrative query commands without valid credentials. Successful exploitation discloses sensitive information including administrator usernames and passwords in cleartext, network and service configuration, and other device details via commands such as queryBasicCfg, queryUserList, queryEmailCfg, queryPPPoECfg, and queryFTPCfg.

• CWE-306

• https://ssd-disclosure.com/ssd-advisory-nvms9000-information-disclosure/
• https://undercodetesting.com/eleven11-botnet-mirai-variant-targeting-nvms-9000-devices/
• https://www.greynoise.io/blog/surge-exploitation-attempts-tvt-dvrs
• https://www.vulncheck.com/advisories/tvt-nvms9000-unauthenticated-admin-queries-and-information-disclosure

Published

Nov 24, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-14001Nagios XI versions prior to 2024R1.1.3 are vulnerable to cro…5.4
• CVE-2024-14002Nagios XI versions prior to 2024R1.1.4 contain a local file …5.5
• CVE-2024-14003Nagios XI versions prior to 2024R1.2 are vulnerable to remot…9.8
• CVE-2024-14004Nagios XI versions prior to 2024R1.2 contain a privilege esc…8.8
• CVE-2024-14005Nagios XI versions prior to 2024R1.2 contain a command injec…8.8
• CVE-2024-14006Nagios XI versions prior to 2024R1.2.2 contain a host header…6.1
• CVE-2024-14008Nagios XI versions prior to 2024R1.3.2 contain a remote comm…7.2
• CVE-2024-14009Nagios XI versions prior to 2024R1.0.1 contain a privilege e…7.2
• CVE-2024-1401The Profile Box Shortcode And Widget WordPress plugin before…4.8
• CVE-2024-14010Typora 1.7.4 contains a command injection vulnerability in t…9.8
• CVE-2024-14011Rejected reason: This is a duplicate.
• CVE-2024-14012Potential privilege escalation issue in Revenera InstallShie…7.3