NUUO NVRmini Devices OS Command Injection Vulnerability
NUUO · NVRmini Devices
Date added (CISA)
2024-12-18
Remediation due
2025-01-08
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
NUUO NVRmini devices contain an OS command injection vulnerability. This vulnerability allows remote command execution via shell metacharacters in the uploaddir parameter for a writeuploaddir command.