critical9.8Public exploit code
CVE-2018-11523
upload.php on NUUO NVRmini 2 devices allows Arbitrary File Upload, such as upload of .php files.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- NUUO NVRmini2 / NVRsolo - Arbitrary File Upload2018-05-29 · webapps · hardware
Impact
upload.php on NUUO NVRmini 2 devices allows Arbitrary File Upload, such as upload of .php files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nuuo | Nvrmini 2 Firmware | through 3.6.5 |