CVE-2022-23227 NUUO NVRmini2 Devices
NUUO NVRmini2 devices contain a missing authentication vulnerability that allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users.
- CVSS
- not scored
On CISA’s exploited list
NUUO NVRmini2 Devices Missing Authentication Vulnerability
- Added
- 2024-12-18
- Federal patch deadline
- 2025-01-08
- Ransomware use
- not known