CVE-2018-14933 NUUO NVRmini Devices
NUUO NVRmini devices contain an OS command injection vulnerability. This vulnerability allows remote command execution via shell metacharacters in the uploaddir parameter for a writeuploaddir command.
- CVSS
- not scored
On CISA’s exploited list
NUUO NVRmini Devices OS Command Injection Vulnerability
- Added
- 2024-12-18
- Federal patch deadline
- 2025-01-08
- Ransomware use
- not known