What’s Vulnerable › Vulnerabilities

CVE-2023-6919: Path Traversal in VGuard IP Camera Network Recorder

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-01-26 · updated 2026-06-17
• Weakness: CWE-25

Description

Path Traversal: '/../filedir' vulnerability in Biges Safe Life Technologies Electronics Inc. VGuard allows Absolute Path Traversal. This issue affects VGuard: before V500.0003.R008.4011.C0012.B351.C.

Affected products

• Biges Vg-255-Bv Firmware: before 500.0003.r008.4011.c0012.b351.c — fixed in 500.0003.r008.4011.c0012.b351.c
• Biges Vg-255-Df Firmware: before 500.0003.r008.4011.c0012.b351.c — fixed in 500.0003.r008.4011.c0012.b351.c
• Biges Vg-255A-Bf Firmware: before 500.0003.r008.4011.c0012.b351.c — fixed in 500.0003.r008.4011.c0012.b351.c
• Biges Vg-4C1A-Lrpu Firmware: before 500.0003.r008.4011.c0012.b351.c — fixed in 500.0003.r008.4011.c0012.b351.c
• Biges Vg-4C1A-Lru Firmware: before 500.0003.r008.4011.c0012.b351.c — fixed in 500.0003.r008.4011.c0012.b351.c
• Biges Vg-4C1E-Nvr Firmware: before 500.0003.r008.4011.c0012.b351.c — fixed in 500.0003.r008.4011.c0012.b351.c
• Biges Vg-64C8Rd-Nvr Firmware: before 500.0003.r008.4011.c0012.b351.c — fixed in 500.0003.r008.4011.c0012.b351.c
• Biges Vg-8C1A-Lrpu Firmware: before 500.0003.r008.4011.c0012.b351.c — fixed in 500.0003.r008.4011.c0012.b351.c
• Biges Vg-8C1E-Nvr Firmware: before 500.0003.r008.4011.c0012.b351.c — fixed in 500.0003.r008.4011.c0012.b351.c

How to fix

Upgrade to a fixed version: Biges Vg-255-Bv Firmware 500.0003.r008.4011.c0012.b351.c; Biges Vg-255-Df Firmware 500.0003.r008.4011.c0012.b351.c; Biges Vg-255A-Bf Firmware 500.0003.r008.4011.c0012.b351.c; Biges Vg-4C1A-Lrpu Firmware 500.0003.r008.4011.c0012.b351.c; Biges Vg-4C1A-Lru Firmware 500.0003.r008.4011.c0012.b351.c; Biges Vg-4C1E-Nvr Firmware 500.0003.r008.4011.c0012.b351.c; Biges Vg-64C8Rd-Nvr Firmware 500.0003.r008.4011.c0012.b351.c; Biges Vg-8C1A-Lrpu Firmware 500.0003.r008.4011.c0012.b351.c; Biges Vg-8C1E-Nvr Firmware 500.0003.r008.4011.c0012.b351.c. Check the vendor advisory for mitigations.

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-0054
• https://www.usom.gov.tr/bildirim/tr-24-0054
• https://www.usom.gov.tr/bildirim/tr-24-0054

Get alerted when CVE-2023-6919 or the next vulnerability affects your stack