CVE-2018-14933

NUUO NVRmini Devices OS Command Injection Vulnerability

NUUO NVRmini devices contain an OS command injection vulnerability. This vulnerability allows remote command execution via shell metacharacters in the uploaddir parameter for a writeuploaddir command. Vendor/Product: NUUO NVRmini Devices. Added to CISA KEV 2024-12-18; required action: The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.

Category: Vulnerability, Known Exploited

Reference: NVD CVE-2018-14933