Critical · published January 14, 2022
CVSS calls it critical at 9.8. It is confirmed in active exploitation. It sits in the 98.9th percentile for exploit probability.
🚨 An unauthenticated user can slip in and upload an encrypted TAR file, unlocking a treasure trove of trouble! 🔥 Imagine a security guard who forgets to check a delivery box — it gets opened, and anyone can plant whatever they want inside. That's exactly what happens here when the authentication check is missing — the door is wide open for mischief! An attacker could exploit this flaw to create arbitrary users and gain control over the system, a scenario that could lead to total chaos. They could even escalate this to overwrite crucial files and execute code with root privileges, taking full command of the device. This is absolutely devastating for any organization relying on these systems!
Imagine a security guard who forgets to check a delivery box — it gets opened, and anyone can plant whatever they want inside. That's exactly what happens here when the authentication check is missing — the door is wide open for mischief! This vulnerability in NUUO NVRmini2 allows an unauthenticated attacker to upload an encrypted TAR archive due to a missing authentication check in handle_import_user.php. When paired with a previously identified flaw (CVE-2011-5325), it enables an attacker to overwrite critical files under the web root, leading to potential code execution as root.
An attacker could exploit this flaw to create arbitrary users and gain control over the system, a scenario that could lead to total chaos. They could even escalate this to overwrite crucial files and execute code with root privileges, taking full command of the device. This is absolutely devastating for any organization relying on these systems! Patch to version 3.12 or later immediately to close this critical security hole. Additionally, review and tighten permissions on the web root directory to prevent unauthorized file modifications. Regularly audit your permissions and user controls to keep your system safe! You've got this! Follow these steps and you’ll be back in the security hero business in no time! 🛡️