CVE-2018-14933
NU
NUUO NVRmini Devices
NUUO NVRmini Devices OS Command Injection Vulnerability
What it is
NUUO NVRmini devices contain an OS command injection vulnerability. This vulnerability allows remote command execution via shell metacharacters in the uploaddir parameter for a writeuploaddir command.
What to do
The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.
Vendor notices and references
- nuuo.com/wp-content/uploads/2023/03/NUUO-EOL-letter%EF%BC%BFNVRmini-2-and-NVRsolo-series.p
- nvd.nist.gov/vuln/detail/CVE-2018-14933
Description and required action as published by CISA. Full record at NVD.