Unscored CVE-2018-1149 EUVD-2018-11787GHSA-wrq3-jg5x-9pp3

cgi_system in NUUO's NVRMini2 3.8.0 and below allows remote attackers to execute arbitrary code via crafted HTTP requests.

Published Sep 19, 2018 · Updated Sep 16, 2024 · Assigned by tenable

Vendor: NUUO Product: NUUO NVRMini2

Description

cgi_system in NUUO's NVRMini2 3.8.0 and below allows remote attackers to execute arbitrary code via crafted HTTP requests.

Affected products

Vendor	Product	Affected	Fixed
NUUO	NUUO NVRMini2	All versions prior to version 3.9.1	—

Advisories 1

ICSA-18-284-01 NUUO NVRmini2 and NVRsolo CISA ICS & IT advisories · Oct 11, 2018

References