NUUO

Records29All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical16CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

NUUO records in CISA KEV

TI-2018-10740 NUUO NVRmini Devices OS Command Injection Vulnerability CRITICAL 100KEV 2024-12-18 TI-2022-07365 NUUO NVRmini2 Devices Missing Authentication Vulnerability CRITICAL 100KEV 2024-12-18

Components

Products in the NVD configurations · select one to filter the records

Nuuo Cms 7 records HIGH Nvrmini 2 7 records CRITICAL Nvrmini2 Firmware 5 records CRITICAL Nvrsolo 5 records CRITICAL Network Video Recorder Firmware 2 records MEDIUM Nvrsolo Firmware 2 records LOW Crystal 1 record HIGH Nt-4040 Titan Firmware 1 record MEDIUM

Records

5 records in Nvrsolo · all components

TI-2016-04929 CVE-2016-5674 · GHSA-fx93-287m-8f7q

__debugging_center_utils___.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5…

CRITICAL 86

__debugging_center_utils___.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execute arbitrary PHP code via the…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.9461 Published 2016-08-31 No fix listed CWE-20

TI-2016-04930 CVE-2016-5675 · GHSA-h33j-gch2-5c9c

handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0…

HIGH 80

handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 through 3.2.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execut…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.70877 Published 2016-08-31 No fix listed CWE-20

TI-2016-04931 CVE-2016-5676 · GHSA-mhfq-mh5j-8qxc

cgi-bin/cgi_system in NUUO NVRmini 2 1.7.5 through 2.x, NUUO NVRsolo 1.7.5 through 2.x…

HIGH 65

cgi-bin/cgi_system in NUUO NVRmini 2 1.7.5 through 2.x, NUUO NVRsolo 1.7.5 through 2.x, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to reset the administrator password via a cmd=loaddefc…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.53715 Published 2016-08-31 No fix listed CWE-285

TI-2016-04933 CVE-2016-5678 · GHSA-xc2r-2r8h-fqw9

NUUO NVRmini 2 1.0.0 through 3.0.0 and NUUO NVRsolo 1.0.0 through 3.0.0 have hardcoded…

MEDIUM 53

NUUO NVRmini 2 1.0.0 through 3.0.0 and NUUO NVRsolo 1.0.0 through 3.0.0 have hardcoded root credentials, which allows remote attackers to obtain administrative access via unspecified vectors.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.08682 Published 2016-08-31 No fix listed CWE-798

TI-2016-04932 CVE-2016-5677 · GHSA-43hr-5fqr-46mx

NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, and NETGEAR…

MEDIUM 47

NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 have a hardcoded qwe23622260 password for the nuuoeng account, which allows remote attackers to…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.11989 Published 2016-08-31 No fix listed CWE-200

Open these records in search →

Critical	16
High	8
Medium	5
Low	0
No CVSS	0