Nvrmini Firmware
1 CVEs
product
Monthly
upgrade_handle.php on NUUO NVRmini devices allows Remote Command Execution via shell metacharacters in the uploaddir parameter for a writeuploaddir command. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
PHP
Command Injection
Nvrmini Firmware
NVD
Exploit-DB
CVSS 3.1
9.8
EPSS
93.7%
EPSS 94%
CVSS 9.8
CRITICAL
POC
KEV
THREAT
Emergency
upgrade_handle.php on NUUO NVRmini devices allows Remote Command Execution via shell metacharacters in the uploaddir parameter for a writeuploaddir command. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
PHP
Command Injection
Nvrmini Firmware
NVD
Exploit-DB