İçeriğe atla
Noroxi

NUUO kayıtları

nuuo üreticisine ait 28 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
2 · %7,1
Silahlaştırılmış
9 · %32,1
Pre-auth RCE
10
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
1699 gün

Yıllara göre kayıt

  1. 18
  2. 19
  3. 21
  4. 22
  5. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

28 kayıt
  • CVE-2018-14933
    97Hemen

    upgrade_handle.php on NUUO NVRmini devices allows Remote Command Execution via shell metacharacters in the uploaddir parameter for a writeup

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %94

    nuuo · nvrmini firmware4 Ağu 2018

  • CVE-2022-23227
    84Hemen

    NUUO NVRmini2 through 3.11 allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %48

    nuuo · nvrmini2 firmware14 Oca 2022

  • CVE-2016-5674
    67Bu hafta

    __debugging_center_utils___.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1

    KritikCVSS 9,8SilahlaştırılmışEPSS %94

    netgear · readynas surveillance31 Ağu 2016

  • CVE-2016-5675
    60Bu hafta

    handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 through 3.2.0, and NET

    KritikCVSS 9,8SilahlaştırılmışEPSS %70

    nuuo · crystal31 Ağu 2016

  • CVE-2016-5676
    60Bu hafta

    cgi-bin/cgi_system in NUUO NVRmini 2 1.7.5 through 2.x, NUUO NVRsolo 1.7.5 through 2.x, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.

    YüksekCVSS 7,5SilahlaştırılmışEPSS %53

    netgear · readynas surveillance31 Ağu 2016

  • CVE-2018-17888
    60Bu hafta

    NUUO CMS all versions 3.1 and prior, The application uses a session identification mechanism that could allow attackers to obtain the active

    KritikCVSS 9,8SilahlaştırılmışEPSS %29

    nuuo · nuuo cms12 Eki 2018

  • CVE-2018-17934
    60Bu hafta

    NUUO CMS All versions 3.3 and prior the application allows external input to construct a pathname that is able to be resolved outside the in

    KritikCVSS 9,8SilahlaştırılmışEPSS %19

    nuuo · nuuo cms27 Kas 2018

  • CVE-2018-17936
    60Bu hafta

    NUUO CMS All versions 3.3 and prior the application allows the upload of arbitrary files that can modify or overwrite configuration files to

    KritikCVSS 9,8SilahlaştırılmışEPSS %15

    nuuo · nuuo cms27 Kas 2018

  • CVE-2018-18982
    53Planlayın

    NUUO CMS All versions 3.3 and prior the web server application allows injection of arbitrary SQL characters, which can be used to inject SQL

    YüksekCVSS 8,8SilahlaştırılmışEPSS %60

    nuuo · nuuo cms27 Kas 2018

  • CVE-2018-19864
    46Planlayın

    NUUO NVRmini2 Network Video Recorder firmware through 3.9.1 allows remote attackers to execute arbitrary code or cause a denial of service (

    KritikCVSS 9,8Kavram kanıtıEPSS %24

    nuuo · nvrmini2 firmware5 Ara 2018

  • CVE-2018-1149
    44Planlayın

    cgi_system in NUUO's NVRMini2 3.8.0 and below allows remote attackers to execute arbitrary code via crafted HTTP requests.

    KritikCVSS 9,8İstismar yokEPSS %15

    nuuo · nvrmini2 firmware19 Eyl 2018

  • CVE-2019-9653
    42Planlayın

    NUUO Network Video Recorder Firmware 1.7.x through 3.3.x allows unauthenticated attackers to execute arbitrary commands via shell metacharac

    KritikCVSS 9,8Kavram kanıtıEPSS %11

    nuuo · network video recorder firmware31 May 2019

  • CVE-2018-11523
    42Planlayın

    upload.php on NUUO NVRmini 2 devices allows Arbitrary File Upload, such as upload of .php files.

    KritikCVSS 9,8Kavram kanıtıEPSS %9

    nuuo · nvrmini 2 firmware29 May 2018

  • CVE-2016-5678
    42Planlayın

    NUUO NVRmini 2 1.0.0 through 3.0.0 and NUUO NVRsolo 1.0.0 through 3.0.0 have hardcoded root credentials, which allows remote attackers to ob

    KritikCVSS 9,8Kavram kanıtıEPSS %8

    nuuo · nvrmini 231 Ağu 2016

  • CVE-2018-15716
    41Planlayın

    NUUO NVRMini2 version 3.9.1 is vulnerable to authenticated remote command injection.

    YüksekCVSS 8,8Kavram kanıtıEPSS %18

    nuuo · nvrmini2 firmware30 Kas 2018

  • CVE-2016-5680
    40Planlayın

    Stack-based buffer overflow in cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote

    YüksekCVSS 8,8Kavram kanıtıEPSS %16

    nuuo · nvrmini 231 Ağu 2016

  • CVE-2018-17890
    40Planlayın

    NUUO CMS all versions 3.1 and prior, The application uses insecure and outdated software components for functionality, which could allow arb

    KritikCVSS 9,8İstismar yokEPSS %3

    nuuo · nuuo cms12 Eki 2018

  • CVE-2016-6553
    40Planlayın

    Nuuo NT-4040 Titan, firmware NT-4040_01.07.0000.0015_1120, uses default credentials

    KritikCVSS 9,8İstismar yokEPSS %2

    nuuo · nt-4040 titan firmware13 Tem 2018

  • CVE-2018-17894
    40Planlayın

    NUUO CMS all versions 3.1 and prior, The application creates default accounts that have hard-coded passwords, which could allow an attacker

    KritikCVSS 9,8İstismar yokEPSS %2

    nuuo · nuuo cms12 Eki 2018

  • CVE-2022-25521
    40Planlayın

    NUUO v03.11.00 was discovered to contain access control issue.

    KritikCVSS 9,8İstismar yokEPSS %1

    nuuo · network video recorder firmware28 Mar 2022

  • CVE-2016-5679
    39İzleyin

    cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote authenticated users to execute

    YüksekCVSS 8,8Kavram kanıtıEPSS %14

    nuuo · nvrmini 231 Ağu 2016

  • CVE-2018-17892
    36İzleyin

    NUUO CMS all versions 3.1 and prior, The application implements a method of user account control that causes standard account security featu

    YüksekCVSS 8,8İstismar yokEPSS %2

    nuuo · nuuo cms12 Eki 2018

  • CVE-2016-5677
    34İzleyin

    NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 have a hardcoded

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    netgear · readynas surveillance31 Ağu 2016

  • CVE-2018-1150
    30İzleyin

    NUUO's NVRMini2 3.8.0 and below contains a backdoor that would allow an unauthenticated remote attacker to take over user accounts if the fi

    YüksekCVSS 7,3İstismar yokEPSS %2

    nuuo · nvrmini2 firmware19 Eyl 2018

  • CVE-2016-15038
    26İzleyin

    NUUO NVRmini 2 deletefile.php path traversal

    OrtaCVSS 6,5İstismar yokEPSS %0

    nuuo · nvrmini 21 Nis 2024