CVE-2022-23227: NUUO NVRmini2 Devices Missing Authentication Vulnerability

Vereiste actie (tekst van CISA, Engels)

The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.

Beschrijving (NVD, Engels)

NUUO NVRmini2 devices contain a missing authentication vulnerability that allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users.

BRONNEN

• CISA KEVCISA Known Exploited Vulnerabilities catalog

Andere lekken bij NUUO

• CVE-2018-14933: NUUO NVRmini Devices OS Command Injection Vulnerability

Gegevens van NVD, CISA KEV, FIRST EPSS en adviezen van leveranciers. Bijgewerkt 10 nov 2026.