critical9.8Public exploit code
CVE-2018-19864
NUUO NVRmini2 Network Video Recorder firmware through 3.9.1 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow), r…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- NUUO NVRMini 2 3.9.1 - 'sscanf' Stack Overflow2019-06-04 · remote · hardware
Impact
NUUO NVRmini2 Network Video Recorder firmware through 3.9.1 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow), resulting in ability to read camera feeds or reconfigure the device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nuuo | Nvrmini2 Firmware | through 3.9.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/153162/NUUO-NVRMini-2-3.9.1-Stack-Overflow.html
- https://www.digitaldefense.com/blog/zero-day-alerts/nuuo-firmware-disclosure/
- https://www.nuuo.com/DownloadMainpage.php
- http://packetstormsecurity.com/files/153162/NUUO-NVRMini-2-3.9.1-Stack-Overflow.html
- https://www.digitaldefense.com/blog/zero-day-alerts/nuuo-firmware-disclosure/
- https://www.nuuo.com/DownloadMainpage.php