← Global Threat Landscape

CVE-2019-20085

CWE-22

High

89.9

RPS

Description

TVT NVMS-1000 devices allow GET /.. Directory Traversal

Source: NVD

Signals

CVSS
7.5
High · v3.1
EPSS
96.07%
Probability of exploitation in the next 30 days (FIRST)
CISA KEV
In CISA KEV since Nov 2021
Fix commit
No known fix commit
Sources: MoreFixes, FreshFixes
Weakness
CWE-22
Published
30 Dec 2019
Last modified 7 Nov 2025

How to read these signals: RPS · EPSS · CISA KEV · Data sources

Get this score from the API

curl -H "Authorization: Bearer dsec_live_xxxxxxxx" \
  https://api.intelligence.devsecure.io/api/v1/rps/CVE-2019-20085

Replace the placeholder with your key. Get a free API key or rank your own CVEs.

Data as of 7 Oct 2026, 05:16 UK time

CVE-2019-20085 · RPS 89.9 · DevSecure Intelligence