[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fJR8qxgMqsUil5J_4q_PUJDy-NkmCsC8z0-Oo9klHArA":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":94,"kevVulnerabilities":145,"topProductsByCves":154,"seoMetadata":165,"meta":174},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":93},22248,"nuuo",19,26,2,136,"2022-06-21","n",[16,22,26,31,38,42,47,50,54,58,61,64,69,73,76,79,82,86,89],{"id":17,"product_name":18,"version_count":9,"cve_count":19,"kev_count":20,"last_cve_update":21},120462,"nvrmini_2",8,0,"2018-05-29",{"id":23,"product_name":24,"version_count":9,"cve_count":25,"kev_count":20,"last_cve_update":13},120467,"nvrsolo",7,{"id":27,"product_name":28,"version_count":29,"cve_count":25,"kev_count":20,"last_cve_update":30},120460,"nuuo_cms",28,"2018-11-27",{"id":32,"product_name":33,"version_count":34,"cve_count":35,"kev_count":36,"last_cve_update":37},120465,"nvrmini2_firmware",54,5,1,"2022-01-14",{"id":39,"product_name":40,"version_count":20,"cve_count":41,"kev_count":36,"last_cve_update":37},120463,"nvrmini2",3,{"id":43,"product_name":44,"version_count":45,"cve_count":11,"kev_count":20,"last_cve_update":46},120457,"network_video_recorder_firmware",6,"2022-03-29",{"id":48,"product_name":49,"version_count":11,"cve_count":11,"kev_count":20,"last_cve_update":13},120468,"nvrsolo_firmware",{"id":51,"product_name":52,"version_count":36,"cve_count":36,"kev_count":20,"last_cve_update":53},120459,"nt-4040_titan_firmware","2018-07-13",{"id":55,"product_name":56,"version_count":20,"cve_count":36,"kev_count":36,"last_cve_update":57},120461,"nvrmini","2018-08-04",{"id":59,"product_name":60,"version_count":36,"cve_count":36,"kev_count":20,"last_cve_update":21},120464,"nvrmini_2_firmware",{"id":62,"product_name":63,"version_count":36,"cve_count":36,"kev_count":36,"last_cve_update":57},120466,"nvrmini_firmware",{"id":65,"product_name":66,"version_count":67,"cve_count":36,"kev_count":20,"last_cve_update":68},120451,"crystal",4,"2016-08-31",{"id":70,"product_name":71,"version_count":20,"cve_count":36,"kev_count":20,"last_cve_update":72},120452,"ne-2020","2018-11-30",{"id":74,"product_name":75,"version_count":20,"cve_count":36,"kev_count":20,"last_cve_update":72},120453,"ne-2040",{"id":77,"product_name":78,"version_count":20,"cve_count":36,"kev_count":20,"last_cve_update":72},120454,"ne-4080",{"id":80,"product_name":81,"version_count":20,"cve_count":36,"kev_count":20,"last_cve_update":72},120455,"ne-4160",{"id":83,"product_name":84,"version_count":20,"cve_count":36,"kev_count":20,"last_cve_update":85},120456,"network_video_recorder","2019-05-31",{"id":87,"product_name":88,"version_count":20,"cve_count":36,"kev_count":20,"last_cve_update":53},120458,"nt-4040_titan",{"id":90,"product_name":91,"version_count":36,"cve_count":20,"kev_count":20,"last_cve_update":92},120469,"unno",null,"Nuuo is a technology vendor with 19 tracked products and 26 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[95,102,108,112,118,123,127,132,137,141],{"cveId":96,"description":97,"publishedDate":57,"cvssScore":98,"cvssVersion":99,"severity":100,"isKev":4,"epssScore":101},"CVE-2018-14933","upgrade_handle.php on NUUO NVRmini devices allows Remote Command Execution via shell metacharacters in the uploaddir parameter for a writeuploaddir command.",9.8,"v3.1","Critical",0.94761,{"cveId":103,"description":104,"publishedDate":68,"cvssScore":98,"cvssVersion":105,"severity":100,"isKev":106,"epssScore":107},"CVE-2016-5674","__debugging_center_utils___.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execute arbitrary PHP code via the log parameter.","v3.0",false,0.9461,{"cveId":109,"description":110,"publishedDate":68,"cvssScore":98,"cvssVersion":105,"severity":100,"isKev":106,"epssScore":111},"CVE-2016-5675","handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 through 3.2.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execute arbitrary PHP code via the NTPServer parameter.",0.70877,{"cveId":113,"description":114,"publishedDate":30,"cvssScore":115,"cvssVersion":105,"severity":116,"isKev":106,"epssScore":117},"CVE-2018-18982","NUUO CMS All versions 3.3 and prior the web server application allows injection of arbitrary SQL characters, which can be used to inject SQL into an executing statement and allow arbitrary code execution.",8.8,"High",0.60791,{"cveId":119,"description":120,"publishedDate":68,"cvssScore":121,"cvssVersion":105,"severity":116,"isKev":106,"epssScore":122},"CVE-2016-5676","cgi-bin\u002Fcgi_system in NUUO NVRmini 2 1.7.5 through 2.x, NUUO NVRsolo 1.7.5 through 2.x, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to reset the administrator password via a cmd=loaddefconfig action.",7.5,0.53715,{"cveId":124,"description":125,"publishedDate":37,"cvssScore":98,"cvssVersion":99,"severity":100,"isKev":4,"epssScore":126},"CVE-2022-23227","NUUO NVRmini2 through 3.11 allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users because of the lack of handle_import_user.php authentication. When combined with another flaw (CVE-2011-5325), it is possible to overwrite arbitrary files under the web root and achieve code execution as root.",0.48497,{"cveId":128,"description":129,"publishedDate":130,"cvssScore":98,"cvssVersion":105,"severity":100,"isKev":106,"epssScore":131},"CVE-2018-17888","NUUO CMS all versions 3.1 and prior, The application uses a session identification mechanism that could allow attackers to obtain the active session ID, which could allow arbitrary remote code execution.","2018-10-12",0.29639,{"cveId":133,"description":134,"publishedDate":135,"cvssScore":98,"cvssVersion":105,"severity":100,"isKev":106,"epssScore":136},"CVE-2018-19864","NUUO NVRmini2 Network Video Recorder firmware through 3.9.1 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow), resulting in ability to read camera feeds or reconfigure the device.","2018-12-05",0.24808,{"cveId":138,"description":139,"publishedDate":30,"cvssScore":98,"cvssVersion":105,"severity":100,"isKev":106,"epssScore":140},"CVE-2018-17934","NUUO CMS All versions 3.3 and prior the application allows external input to construct a pathname that is able to be resolved outside the intended directory. This could allow an attacker to impersonate a legitimate user, obtain restricted information, or execute arbitrary code.",0.19653,{"cveId":142,"description":143,"publishedDate":72,"cvssScore":115,"cvssVersion":105,"severity":116,"isKev":106,"epssScore":144},"CVE-2018-15716","NUUO NVRMini2 version 3.9.1 is vulnerable to authenticated remote command injection. An attacker can send crafted requests to upgrade_handle.php to execute OS commands as root.",0.18498,[146,151],{"cveId":96,"description":97,"publishedDate":57,"cvssScore":98,"cvssVersion":99,"severity":100,"isKev":4,"epssScore":101,"cisaVulnName":147,"cisaDateAdded":148,"cisaShortDescription":149,"cisaRequiredAction":150},"NUUO NVRmini Devices OS Command Injection Vulnerability ","2024-12-18","NUUO NVRmini devices contain an OS command injection vulnerability. This vulnerability allows remote command execution via shell metacharacters in the uploaddir parameter for a writeuploaddir command.","The impacted product is end-of-life (EoL) and\u002For end-of-service (EoS). Users should discontinue utilization of the product.",{"cveId":124,"description":125,"publishedDate":37,"cvssScore":98,"cvssVersion":99,"severity":100,"isKev":4,"epssScore":126,"cisaVulnName":152,"cisaDateAdded":148,"cisaShortDescription":153,"cisaRequiredAction":150},"NUUO NVRmini2 Devices Missing Authentication Vulnerability ","NUUO NVRmini2 devices contain a missing authentication vulnerability that allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users. ",[155,156,157,158,159,160,161,162,163,164],{"id":17,"product_name":18,"version_count":9,"cve_count":19,"kev_count":20,"last_cve_update":21},{"id":23,"product_name":24,"version_count":9,"cve_count":25,"kev_count":20,"last_cve_update":13},{"id":27,"product_name":28,"version_count":29,"cve_count":25,"kev_count":20,"last_cve_update":30},{"id":32,"product_name":33,"version_count":34,"cve_count":35,"kev_count":36,"last_cve_update":37},{"id":39,"product_name":40,"version_count":20,"cve_count":41,"kev_count":36,"last_cve_update":37},{"id":43,"product_name":44,"version_count":45,"cve_count":11,"kev_count":20,"last_cve_update":46},{"id":48,"product_name":49,"version_count":11,"cve_count":11,"kev_count":20,"last_cve_update":13},{"id":51,"product_name":52,"version_count":36,"cve_count":36,"kev_count":20,"last_cve_update":53},{"id":55,"product_name":56,"version_count":20,"cve_count":36,"kev_count":36,"last_cve_update":57},{"id":59,"product_name":60,"version_count":36,"cve_count":36,"kev_count":20,"last_cve_update":21},{"title":166,"metaDescription":167,"keywords":168,"structuredData":169},"Nuuo - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Nuuo covering 19 products with 26 tracked vulnerabilities including 2 critical and 0 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Nuuo vulnerabilities, Nuuo security, Nuuo CVE, Nuuo threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking, Nuuo KEV, Nuuo exploited vulnerabilities",{"@context":170,"@type":171,"name":172,"description":167,"url":173},"https:\u002F\u002Fschema.org","Organization","Nuuo","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fnuuo",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":175,"apiVersion":176},"2026-10-19T17:22:55.600Z","3.0"]