CVE-2019-13408: Androvideo Vd 1 Firmware

High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days.

A relative path traversal vulnerability found in Advan VD-1 firmware versions up to 230. It allows attackers to download arbitrary files via url cgibin/ExportSettings.cgi?Download=filepath, without any authentication.

Affected products

• Androvideo Vd 1 Firmware: up to and including 230
• GeoVision Gv-VD8700 Firmware: up to and including 1.01
• GeoVision Gv-VR360 Firmware: up to and including 1.10

Published 2019-08-29. Last modified 2026-06-17.