# Nuuo vulnerabilities

> Nuuo has 26 published vulnerabilities across 19 products in our catalogue. 2 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Nvrmini 2, with 8. If you run Nuuo software, patch the exploited flaws first.

Canonical page: https://www.precursorintelligence.com/vendors/nuuo

## At a glance

- **Published vulnerabilities:** 26
- **Known to be exploited:** 2
- **Products:** 19
- **Versions:** 136
- **Most recently added to the known-exploited list:** [CVE-2018-14933](https://www.precursorintelligence.com/what-is/cve-2018-14933), 18 December 2024. We keep watching the list.

## Which Nuuo products have the most vulnerabilities?

- [Nvrmini 2](https://www.precursorintelligence.com/product/nuuo/nvrmini_2): 8 published vulnerabilities, 19 versions
- [Nvrsolo](https://www.precursorintelligence.com/product/nuuo/nvrsolo): 7 published vulnerabilities, 19 versions
- [Nuuo CMS](https://www.precursorintelligence.com/product/nuuo/nuuo_cms): 7 published vulnerabilities, 28 versions
- [Nvrmini2 Firmware](https://www.precursorintelligence.com/product/nuuo/nvrmini2_firmware): 5 published vulnerabilities, 54 versions
- [Nvrmini2](https://www.precursorintelligence.com/product/nuuo/nvrmini2): 3 published vulnerabilities, 0 versions
- [Network Video Recorder Firmware](https://www.precursorintelligence.com/product/nuuo/network_video_recorder_firmware): 2 published vulnerabilities, 6 versions
- [Nvrsolo Firmware](https://www.precursorintelligence.com/product/nuuo/nvrsolo_firmware): 2 published vulnerabilities, 2 versions
- [Nt-4040 Titan Firmware](https://www.precursorintelligence.com/product/nuuo/nt-4040_titan_firmware): 1 published vulnerability, 1 version
- [Nvrmini](https://www.precursorintelligence.com/product/nuuo/nvrmini): 1 published vulnerability, 0 versions
- [Nvrmini 2 Firmware](https://www.precursorintelligence.com/product/nuuo/nvrmini_2_firmware): 1 published vulnerability, 1 version

Each product page lists its own known-exploited flaws.

## Which Nuuo vulnerabilities are being exploited?

2 flaws are on the government list of vulnerabilities known to be exploited, newest first:

- [CVE-2018-14933](https://www.precursorintelligence.com/what-is/cve-2018-14933): NUUO NVRmini Devices OS Command Injection Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 95%, known exploited since 18 December 2024.
- [CVE-2022-23227](https://www.precursorintelligence.com/what-is/cve-2022-23227): NUUO NVRmini2 Devices Missing Authentication Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 48%, known exploited since 18 December 2024.

## Which Nuuo flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast (the chance each flaw is used in an attack in the next 30 days):

- [CVE-2018-14933](https://www.precursorintelligence.com/what-is/cve-2018-14933): 95%, Critical (CVSS 9.8), known exploited
- [CVE-2016-5674](https://www.precursorintelligence.com/what-is/cve-2016-5674): 95%, Critical (CVSS 9.8)
- [CVE-2016-5675](https://www.precursorintelligence.com/what-is/cve-2016-5675): 71%, Critical (CVSS 9.8)
- [CVE-2018-18982](https://www.precursorintelligence.com/what-is/cve-2018-18982): 61%, High (CVSS 8.8)
- [CVE-2016-5676](https://www.precursorintelligence.com/what-is/cve-2016-5676): 54%, High (CVSS 7.5)
- [CVE-2022-23227](https://www.precursorintelligence.com/what-is/cve-2022-23227): 48%, Critical (CVSS 9.8), known exploited
- [CVE-2018-17888](https://www.precursorintelligence.com/what-is/cve-2018-17888): 30%, Critical (CVSS 9.8)
- [CVE-2018-19864](https://www.precursorintelligence.com/what-is/cve-2018-19864): 25%, Critical (CVSS 9.8)
- [CVE-2018-17934](https://www.precursorintelligence.com/what-is/cve-2018-17934): 20%, Critical (CVSS 9.8)
- [CVE-2018-15716](https://www.precursorintelligence.com/what-is/cve-2018-15716): 18%, High (CVSS 8.8)

## All Nuuo products we track

11 products with at least one tracked version, most vulnerabilities first:

- [Nvrmini 2](https://www.precursorintelligence.com/product/nuuo/nvrmini_2): 8 vulnerabilities, 19 versions
- [Nvrsolo](https://www.precursorintelligence.com/product/nuuo/nvrsolo): 7 vulnerabilities, 19 versions
- [Nuuo CMS](https://www.precursorintelligence.com/product/nuuo/nuuo_cms): 7 vulnerabilities, 28 versions
- [Nvrmini2 Firmware](https://www.precursorintelligence.com/product/nuuo/nvrmini2_firmware): 5 vulnerabilities, 54 versions
- [Network Video Recorder Firmware](https://www.precursorintelligence.com/product/nuuo/network_video_recorder_firmware): 2 vulnerabilities, 6 versions
- [Nvrsolo Firmware](https://www.precursorintelligence.com/product/nuuo/nvrsolo_firmware): 2 vulnerabilities, 2 versions
- [Nt-4040 Titan Firmware](https://www.precursorintelligence.com/product/nuuo/nt-4040_titan_firmware): 1 vulnerability, 1 version
- [Nvrmini 2 Firmware](https://www.precursorintelligence.com/product/nuuo/nvrmini_2_firmware): 1 vulnerability, 1 version
- [Nvrmini Firmware](https://www.precursorintelligence.com/product/nuuo/nvrmini_firmware): 1 vulnerability, 1 version
- [Crystal](https://www.precursorintelligence.com/product/nuuo/crystal): 1 vulnerability, 4 versions
- [Unno](https://www.precursorintelligence.com/product/nuuo/unno): 0 vulnerabilities, 1 version

## Questions

### How many vulnerabilities does Nuuo have?

Our catalogue lists 26 published vulnerabilities across 19 products and 136 versions from Nuuo. The most recent Nuuo flaw added to the known-exploited list is CVE-2018-14933, on 18 December 2024.

### Which Nuuo vulnerabilities are being exploited?

2 Nuuo vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2018-14933 and CVE-2022-23227. The full list is on this page.

### Which Nuuo product has the most vulnerabilities?

Nvrmini 2, with 8 published vulnerabilities. Its own page lists the ones known to be exploited.

### How do I get alerts for new Nuuo vulnerabilities?

Create a Precursor Intelligence account and track the Nuuo products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.

## Running Nuuo?

Precursor Intelligence keeps checking for you:

- **Tell us what you run.** Pick your software from a list, or let us work it out from your website.
- **We match it to every flaw.** Over 400,000 published flaws, checked against your list.
- **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it.
- **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools.

Start free (no card, nothing to install): https://www.precursorintelligence.com/register
Book a demo: https://www.precursorintelligence.com/contact

