NVR
Security incidents tagged NVR. Newest first.
0 NVR incidents in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 2
- Live
- 0
- Patched
- 0
- Days without an incident
- 673
- Longest quiet run: 673 days (Dec 19–Oct 22)
Show 2 older incidents2 older incidents
December 2024 2
CriticalNUUO NVRmini Devices OS Command InjectionNo patch yet
NUUO NVRmini Devices No patch yet
NUUO NVRmini devices contain an OS command injection vulnerability. This vulnerability allows remote command execution via shell metacharacters in the uploaddir parameter for a writeuploaddir command. Added to the CISA KEV catalog on 2024-12-18. CVE-2018-14933 was assigned before 2024; the KEV listing came in 2024.
Open incident →CVE-2018-14933CriticalNUUO NVRmini2 Devices Missing AuthenticationNo patch yet
NUUO NVRmini2 Devices No patch yet
NUUO NVRmini2 devices contain a missing authentication vulnerability that allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users. Added to the CISA KEV catalog on 2024-12-18. CVE-2022-23227 was assigned before 2024; the KEV listing came in 2024.
Open incident →CVE-2022-23227
