CVE-2018-15716CWE-78

NUUO NVRMini2 version 3.9.1 is vulnerable to authenticated remote command injection

published November 30, 2018

CVSS
—
EPSS
18%
Percentile
97.2
In the wild
Unconfirmed
What it is

NUUO NVRMini2 version 3.9.1 is vulnerable to authenticated remote command injection. An attacker can send crafted requests to upgrade_handle.php to execute OS commands as root.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.18498 · 97.2th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2018-11-30T20:00Z
EPSS history
Timeline
  • 30 NOV 20:00Z
    NUUO NVRMini2 version 3.9.1 is vulnerable to authenticated remote command injection
    cvelistv5