CVE-2019-12182: Directory Traversal in Safescan Timemoto and TA-8000 series version 1.0 allows unauthenticated remote attacker
67
This week
CRITICAL 9.8REMOTEUPGRADEUPGRADEUPGRADE
CVE-2019-12182 is a critical-severity flaw (CVSS 9.8) affecting ta-8010 firmware, ta-8015 firmware, ta-8020 firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Directory Traversal in Safescan Timemoto and TA-8000 series version 1.0 allows unauthenticated remote attackers to execute code via the administrative API.
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
Published CVE record published
Updated Record last modified
safescan ta-8010 firmware UPGRADE
Affected: < 7.0.3.100-ta8000-14
Fixed in: 7.0.3.100-ta8000-14
Safe to downgrade to: no unaffected older release
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
safescan ta-8015 firmware UPGRADE
Affected: < 7.0.3.100-ta8000-14
Fixed in: 7.0.3.100-ta8000-14
Safe to downgrade to: no unaffected older release
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
safescan ta-8020 firmware UPGRADE
Affected: < 7.0.3.100-ta8000-14
Fixed in: 7.0.3.100-ta8000-14
Safe to downgrade to: no unaffected older release
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
safescan ta-8025 firmware UPGRADE
Affected: < 7.0.3.100-ta8000-14
Fixed in: 7.0.3.100-ta8000-14
Safe to downgrade to: no unaffected older release
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
safescan ta-8030 firmware UPGRADE
Affected: < 7.0.3.100-ta8000-14
Fixed in: 7.0.3.100-ta8000-14
Safe to downgrade to: no unaffected older release
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
safescan ta-8035 firmware UPGRADE
Affected: < 7.0.3.100-ta8000-14
Fixed in: 7.0.3.100-ta8000-14
Safe to downgrade to: no unaffected older release
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
Verify at the official sourceNVD · CVE Program · Report a problem with this page Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2019-12182?
ta-8010 firmware: upgrade to 7.0.3.100-ta8000-14; ta-8015 firmware: upgrade to 7.0.3.100-ta8000-14; ta-8020 firmware: upgrade to 7.0.3.100-ta8000-14. Exact commands for each OS are on this page.
Is CVE-2019-12182 being exploited?
CVE-2019-12182 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2019-12182 affect?
CVE-2019-12182 affects ta-8010 firmware, ta-8015 firmware, ta-8020 firmware. Severity is critical (CVSS 9.8). Directory Traversal in Safescan Timemoto and TA-8000 series version 1.0 allows unauthenticated remote attackers to execute code via the administrative API.
How urgent is CVE-2019-12182?
Priority 67/100. Critical severity; EPSS top 8%: very likely to be exploited; Public exploit reference; Remotely exploitable, no login, no user action
Related CVEs
CVE-2019-12183HIGH 7.5MITIGATEMITIGATE Incorrect Access Control in Safescan Timemoto TM-616 and TA-8000 series allows remote attackers to read any fi
PatchTheCVE