CVE-2019-20085

TVT NVMS-1000 devices allow GET /.. Directory Traversal

• Published Dec 30, 2019
• CVSS 7.5 high
• 96.1% chance of exploitation in the next 30 days (EPSS)
• In CISA's Known Exploited Vulnerabilities catalog
• Public exploit code is available

CVE-2019-20085 at the National Vulnerability Database