CVE-2022-23227
NUUO NVRmini2 through 3.11 allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users...
Basic Information
- CVE State
- PUBLISHED
- Reserved Date
- January 14, 2022
- Published Date
- January 14, 2022
- Last Updated
- February 10, 2025
- Vendor
- n/a
- Product
- n/a
- Description
- NUUO NVRmini2 through 3.11 allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users because of the lack of handle_import_user.php authentication. When combined with another flaw (CVE-2011-5325), it is possible to overwrite arbitrary files under the web root and achieve code execution as root.
CVSS Scores
SSVC Information
- Exploitation
- active
- Automatable
- Yes
- Technical Impact
- total
Exploit Status
- Exploited in the Wild
- Yes (added 2024-12-18 00:00:00 UTC) Source
References
https://github.com/pedrib/PoC/blob/master/advisories/NUUO/nuuo_nvrmini_round2.mkd
https://github.com/rapid7/metasploit-framework/pull/16044
https://portswigger.net/daily-swig/researcher-discloses-alleged-zero-day-vulnerabilities-in-nuuo-nvrmini2-recording-device
https://news.ycombinator.com/item?id=29936569
Known Exploited Vulnerability Information
| Source | Added Date |
|---|---|
| CISA | 2024-12-18 00:00:00 UTC |