Skip to content
OpenAdvisories
Critical ICSA-18-284-01 2 CVEs

NUUO NVRmini2 and NVRsolo

Published Oct 11, 2018 · Updated Oct 11, 2018

Vendor: NUUO Product: NVRmini2 NVRsolo

Summary

Successful exploitation of these vulnerabilities could allow an attacker to achieve remote code execution and user account modification.

Vulnerabilities 2

  • Unscored —
    CVE-2018-1149 EPSS 15%

    cgi_system in NUUO's NVRMini2 3.8.0 and below allows remote attackers to execute arbitrary code via crafted HTTP reques…

    NUUO NUUO NVRMini2
  • Unscored —
    CVE-2018-1150

    NUUO's NVRMini2 3.8.0 and below contains a backdoor that would allow an unauthenticated remote attacker to take over us…

    NUUO NUUO NVRMini2

Revision history

  1. #1

    ICSA-18-284-01 NUUO NVRmini2 and NVRsolo

References