CVE-2018-14933

Produto

NUUO / NVRmini Devices

Vulnerabilidade

NUUO NVRmini Devices OS Command Injection Vulnerability

Adicionado ao KEV

18 de dez. de 2024

Corrigir até

8 de jan. de 2025

Uso conhecido em ransomware

Não

Descrição resumida

NUUO NVRmini devices contain an OS command injection vulnerability. This vulnerability allows remote command execution via shell metacharacters in the uploaddir parameter for a writeuploaddir command.

Ação necessária

The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.

Notas

https://nuuo.com/wp-content/uploads/2023/03/NUUO-EOL-letter%EF%BC%BFNVRmini-2-and-NVRsolo-series.pdf ; https://nvd.nist.gov/vuln/detail/CVE-2018-14933