CVE Tracker

CVE ID	Severity	EPSS	Vendor	Description	Date	Status
CVE-2022-23227	High	47.0%	NUUONVRmini2 Devices	NUUO NVRmini2 devices contain a missing authentication vulnerability that allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users.	Dec 18, 2024	KEV
CVE-2018-14933	High	93.9%	NUUONVRmini Devices	NUUO NVRmini devices contain an OS command injection vulnerability. This vulnerability allows remote command execution via shell metacharacters in the uploaddir parameter for a writeuploaddir command.	Dec 18, 2024	KEV

CVE-2022-23227KEV

High

NUUO NVRmini2 devices contain a missing authentication vulnerability that allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users.

NUUOEPSS 47.0%

CVE-2018-14933KEV

High

NUUO NVRmini devices contain an OS command injection vulnerability. This vulnerability allows remote command execution via shell metacharacters in the uploaddir parameter for a writeuploaddir command.

NUUOEPSS 93.9%