Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools

CVE-2018-14933

More InfoOfficial Page

NUUO NVRmini Devices OS Command Injection Vulnerability

NUUONVRmini Devices

NUUO NVRmini devices contain an OS command injection vulnerability. This vulnerability allows remote command execution via shell metacharacters in the uploaddir parameter for a writeuploaddir command.

Required Action

The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.

Related Information

Vendor/Project:NUUO Inc.NUUO
Product:NVRmini Devices
CWE:
CWE-78
Used in Ransomware:Unknown

Timeline

Date Added:18 Dec, 2024
Due Date:08 Jan, 2025

Additional Notes

https://nuuo.com/wp-content/uploads/2023/03/NUUO-EOL-letter%EF%BC%BFNVRmini-2-and-NVRsolo-series.pdf ; https://nvd.nist.gov/vuln/detail/CVE-2018-14933
Details not found