NetSight
critical9.8Public exploit code

CVE-2018-11523

upload.php on NUUO NVRmini 2 devices allows Arbitrary File Upload, such as upload of .php files.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

upload.php on NUUO NVRmini 2 devices allows Arbitrary File Upload, such as upload of .php files.

Affected products

VendorProductAffected versions
NuuoNvrmini 2 Firmware
through 3.6.5

Weakness classification

References