Vendor
NUUO
11 known vulnerabilities.
NUUO at a glance
- Last 12 months
- 0
- Critical · all time
- 0
- Exploited · all time
- 0
- Public exploit · all time
- 3
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 1 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
Most common weaknesses
Latest advisories
-
Critical
NUUO CMS (Update A)
Successful exploitation of theses vulnerabilities could result in arbitrary remote code execution.
first Oct 11, 2018 -
CriticalICSA-18-284-01 2 CVEs
NUUO NVRmini2 and NVRsolo
Successful exploitation of these vulnerabilities could allow an attacker to achieve remote code execution and user account modification.
11 results · Feed
-
High 7.3
NUUO Camera handle_config.php print_file command injection
A vulnerability was found in NUUO Camera up to 20250203. It has been declared as critical. This vulnerability affects the function print_file of the file /handle_config.php. The manipulation of the argument log leads to command injection. The attack can be in…
-
Medium 6.5
NUUO NVRmini 2 deletefile.php path traversal
A vulnerability, which was classified as critical, was found in NUUO NVRmini 2 up to 3.0.8. Affected is an unknown function of the file /deletefile.php. The manipulation of the argument filename leads to path traversal. It is possible to launch the attack rem…
-
Medium 5.4
NUUO Camera deletefile.php denial of service
A vulnerability was found in NUUO Camera up to 20240319 and classified as problematic. This issue affects some unknown processing of the file /deletefile.php. The manipulation of the argument filename leads to denial of service. The attack may be initiated re…
-
Unscored —
NUUO NVRMini2 version 3.9.1 is vulnerable to authenticated remote command injection. An attacker can send crafted reque…
-
Unscored —
NUUO CMS all versions 3.1 and prior, The application uses a session identification mechanism that could allow attackers…
-
Unscored —
NUUO CMS all versions 3.1 and prior, The application creates default accounts that have hard-coded passwords, which cou…
-
Unscored —
NUUO CMS all versions 3.1 and prior, The application uses insecure and outdated software components for functionality, …
-
Unscored —
NUUO CMS all versions 3.1 and prior, The application implements a method of user account control that causes standard a…
-
Unscored —
NUUO's NVRMini2 3.8.0 and below contains a backdoor that would allow an unauthenticated remote attacker to take over us…
-
Unscored —CVE-2018-1149 EPSS 15%
cgi_system in NUUO's NVRMini2 3.8.0 and below allows remote attackers to execute arbitrary code via crafted HTTP reques…
-
Unscored —
Nuuo NT-4040 Titan, firmware NT-4040_01.07.0000.0015_1120, uses default credentials
Nuuo NT-4040 Titan, firmware NT-4040_01.07.0000.0015_1120, uses non-random default credentials of: admin:admin and localdisplay:111111. A remote network attacker can gain privileged access to a vulnerable device.