Threat database

2 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	KEVEPSS 94%	CVE-2018-14933NVRmini Devices · NUUO NVRmini Devices OS Command Injection Vulnerability Critical9.8KEVEPSS 94%2024-12-18CISA KEVCVE-2018-14933 NUUO NVRmini devices have an OS command injection vulnerability identified as CVE-2018-14933. This flaw allows remote attackers to execute arbitrary commands on the device by injecting shell metacharacters into the uploaddir parameter of the writeuploaddir command. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided. KEVEPSS 94%Vulnerability NUUO #exploited-in-the-wild	CISA KEV	2024-12-18
Critical	9.8	KEVEPSS 48%	CVE-2022-23227NVRmini2 Devices · NUUO NVRmini2 Devices Missing Authentication Vulnerability Critical9.8KEVEPSS 48%2024-12-18CISA KEVCVE-2022-23227 NUUO NVRmini2 devices have a missing authentication vulnerability that permits unauthenticated attackers to upload encrypted TAR archives. This flaw can be exploited to add arbitrary users to the device, potentially compromising device security. The vulnerability is classified as high severity and has been exploited in the wild. No specific affected versions or patch information is provided. KEVEPSS 48%Vulnerability NUUO #exploited-in-the-wild	CISA KEV	2024-12-18

Showing 1–2 of 2 results