NUUO 2

Organization

CVE-2018-14933: NUUO NVRmini Devices OS Command Injection Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Dec 18, 2024

NUUO NVRmini devices contain an OS command injection vulnerability. This vulnerability allows remote command execution via shell metacharacters in the uploaddir parameter for a writeuploaddir command.

Vulnerabilities & Patching

CVE-2022-23227: NUUO NVRmini2 Devices Missing Authentication Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Dec 18, 2024

NUUO NVRmini2 devices contain a missing authentication vulnerability that allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users.

Vulnerabilities & Patching