Read the docs

NUUO

Records29All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical16CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

NUUO records in CISA KEV
TI-2018-10740 NUUO NVRmini Devices OS Command Injection Vulnerability Priority CRITICAL 100KEV 2024-12-18TI-2022-07365 NUUO NVRmini2 Devices Missing Authentication Vulnerability Priority CRITICAL 100KEV 2024-12-18

Components

Products in the NVD configurations · select one to filter the records
Nuuo Cms 7 records HIGH Nvrmini 2 7 records CRITICAL Nvrmini2 Firmware 5 records CRITICAL Nvrsolo 5 records CRITICAL Network Video Recorder Firmware 2 records MEDIUM Nvrsolo Firmware 2 records LOW Crystal 1 record HIGH Nt-4040 Titan Firmware 1 record MEDIUM

Records

7 records in Nvrmini 2 · all components

TI-2016-04929 CVE-2016-5674 · GHSA-fx93-287m-8f7q

__debugging_center_utils___.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5…

Priority CRITICAL 86

__debugging_center_utils___.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execute arbitrary PHP code via the…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.9461 Published 2016-08-31 No fix listed CWE-20
TI-2016-04930 CVE-2016-5675 · GHSA-h33j-gch2-5c9c

handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0…

Priority HIGH 80

handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 through 3.2.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execut…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.70877 Published 2016-08-31 No fix listed CWE-20
TI-2016-04935 CVE-2016-5680 · GHSA-qjpx-gqc9-mcgx

Stack-based buffer overflow in cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and…

Priority MEDIUM 55

Stack-based buffer overflow in cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote authenticated users to execute arbitrary code via the sn parameter to the transf…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.16752 Published 2016-08-31 No fix listed CWE-119
TI-2016-04934 CVE-2016-5679 · GHSA-qv3w-r93f-fcxc

cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance…

Priority MEDIUM 53

cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the sn parameter to the transfer_…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.14119 Published 2016-08-31 No fix listed CWE-78
TI-2016-04932 CVE-2016-5677 · GHSA-43hr-5fqr-46mx

NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, and NETGEAR…

Priority MEDIUM 47

NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 have a hardcoded qwe23622260 password for the nuuoeng account, which allows remote attackers to…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.11989 Published 2016-08-31 No fix listed CWE-200
Open these records in search →