What it is
TVT devices utilizing NVMS-1000 software contain a directory traversal vulnerability via GET /.. requests.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.