Description
NUUO's NVRMini2 3.8.0 and below contains a backdoor that would allow an unauthenticated remote attacker to take over user accounts if the file /tmp/moses exists.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NUUO | NUUO NVRMini2 | All versions prior to version 3.9.1 | — |
Advisories 1
- ICSA-18-284-01 NUUO NVRmini2 and NVRsolo CISA ICS & IT advisories · Oct 11, 2018