[ Vendor · 4 CVEs ]
Nuuo
CVEs affecting Nuuo published in the last 30 days, plus any Nuuo CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2022-23227 | 14 Jan 2022 | CVSS 9.8 | NUUO NVRmini2 Devices Missing AuthenticationNUUO NVRmini2 through 3.11 allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users because… | Exploited |
| CVE-2022-23227 | 14 Jan 2022 | CVSS 9.8 | NUUO NVRmini2 Devices Missing AuthenticationNUUO NVRmini2 through 3.11 allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users because… | Exploited |
| CVE-2018-14933 | 4 Aug 2018 | CVSS 9.8 | NUUO NVRmini Devices OS Command Injectionupgrade_handle.php on NUUO NVRmini devices allows Remote Command Execution via shell metacharacters in the uploaddir parameter for a writeuploaddir… | Exploited |
| CVE-2018-14933 | 4 Aug 2018 | CVSS 9.8 | NUUO NVRmini Devices OS Command Injectionupgrade_handle.php on NUUO NVRmini devices allows Remote Command Execution via shell metacharacters in the uploaddir parameter for a writeuploaddir… | Exploited |