{"id":"CVE-2023-6919","aliases":["EUVD-2023-59118","GHSA-8pxq-68qw-492f"],"status":"published","title":"Path Traversal in VGuard IP Camera Network Recorder","description":"Path Traversal: '/../filedir' vulnerability in Biges Safe Life Technologies Electronics Inc. VGuard allows Absolute Path Traversal.\n\nThis issue affects VGuard: before V500.0003.R008.4011.C0012.B351.C.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00582,"percentile":0.48091,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-25"],"published":"2024-01-26T07:52:59Z","modified":"2026-06-17T06:51:41Z","products":[{"vendor":"biges","product":"vg-255-bv_firmware"},{"vendor":"biges","product":"vg-255-df_firmware"},{"vendor":"biges","product":"vg-255a-bf_firmware"},{"vendor":"biges","product":"vg-4c1a-lrpu_firmware"},{"vendor":"biges","product":"vg-4c1a-lru_firmware"},{"vendor":"biges","product":"vg-4c1e-nvr_firmware"},{"vendor":"biges","product":"vg-64c8rd-nvr_firmware"},{"vendor":"biges","product":"vg-8c1a-lrpu_firmware"},{"vendor":"biges","product":"vg-8c1e-nvr_firmware"},{"vendor":"biges safe life technologies electronics inc.","product":"vguard"}],"references":[{"url":"https://www.usom.gov.tr/bildirim/tr-24-0054","tags":["government-resource","broken-link","x_transferred","Third Party Advisory"]},{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-0054","tags":["government-resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6919"},{"url":"https://github.com/advisories/GHSA-8pxq-68qw-492f"}],"sources":{"cve":[{"id":"CVE-2023-6919","title":"Path Traversal in VGuard IP Camera Network Recorder","description":"Path Traversal: '/../filedir' vulnerability in Biges Safe Life Technologies Electronics Inc. VGuard allows Absolute Path Traversal.\n\nThis issue affects VGuard: before V500.0003.R008.4011.C0012.B351.C.","status":"published","published":"2024-01-26T07:52:59.322Z","modified":"2026-05-20T08:05:18.057Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-25"],"updated_at":"2026-11-02T14:35:25.095989Z"}],"euvd":[{"id":"EUVD-2023-59118","description":"Path Traversal: '/../filedir' vulnerability in Biges Safe Life Technologies Electronics Inc. VGuard allows Absolute Path Traversal.\n\nThis issue affects VGuard: before V500.0003.R008.4011.C0012.B351.C.","status":"published","published":"2024-01-26T07:52:59Z","modified":"2026-05-20T08:05:18Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T18:21:14.831553Z"}],"ghsa":[{"id":"GHSA-8pxq-68qw-492f","title":"Path Traversal: '/../filedir' vulnerability in Biges Safe Life Technologies Electronics Inc....","description":"Path Traversal: '/../filedir' vulnerability in Biges Safe Life Technologies Electronics Inc. VGuard allows Absolute Path Traversal.This issue affects VGuard: before V500.0003.R008.4011.C0012.B351.C.","status":"published","published":"2024-01-26T09:30:23Z","modified":"2026-05-20T09:30:33Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-25"],"updated_at":"2026-11-02T15:08:13.172248Z"}],"nvd":[{"id":"CVE-2023-6919","description":"Path Traversal: '/../filedir' vulnerability in Biges Safe Life Technologies Electronics Inc. VGuard allows Absolute Path Traversal.\n\nThis issue affects VGuard: before V500.0003.R008.4011.C0012.B351.C.","status":"published","published":"2024-01-26T08:15:42.203Z","modified":"2026-06-17T06:51:41.093Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-25"],"updated_at":"2026-11-02T14:09:01.900189Z"}]}}
