[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f_vuVieaU9SS_7nLmSP69fWtfwcfHI-NByz6YwAqQIIU":3,"g5a-risk:CVE-2022-23227":151},{"success":4,"data":5,"meta":149},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":44,"epssPercentile":27,"epssTimeSeries":45,"severity":46,"affectedProducts":47,"affectedProductsCount":57,"references":58,"referencesCount":89,"weaknesses":90,"weaknessesCount":98,"isActivelyExploited":4,"cisaInfo":99,"otxData":27,"relatedBlogPosts":100,"seoMetadata":101,"configurations":126,"relatedVendorCves":140,"notableEvents":141},"CVE-2022-23227","What is CVE-2022-23227?","NUUO NVRmini2 through 3.11 allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users because of the lack of handle_import_user.php authentication. When combined with another flaw (CVE-2011-5325), it is possible to overwrite arbitrary files under the web root and achieve code execution as root.","NUUO NVRmini2 through 3.11 allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users because of the l...","2022-01-14T18:15:10.303","2025-10-22T00:17:58.903",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":34,"CVSSMetricV2":35,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},[],[36],{"Source":17,"Type":18,"CVSSData":37,"BaseSeverity":25,"ExploitabilityScore":41,"ImpactScore":41,"ACInsufInfo":43,"ObtainAllPrivilege":43,"ObtainUserPrivilege":43,"ObtainOtherPrivilege":43,"UserInteractionRequired":43},{"Version":38,"VectorString":39,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":40,"IntegrityImpact":40,"AvailabilityImpact":40,"BaseScore":41,"BaseSeverity":42,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","COMPLETE",10,"",false,0.48497,[44,44,44,44,44,44,44],"Critical",[48,53],{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"nuuo","nvrmini2_firmware","*","cpe:2.3:o:nuuo:nvrmini2_firmware:*:*:*:*:*:*:*:*",{"vendor":49,"product":54,"version":55,"criteria":56,"vulnerable":43},"nvrmini2","-","cpe:2.3:h:nuuo:nvrmini2:-:*:*:*:*:*:*:*",2,[59,65,69,73,77,79,81,83,85],{"url":60,"source":61,"tags":62},"https:\u002F\u002Fgithub.com\u002Fpedrib\u002FPoC\u002Fblob\u002Fmaster\u002Fadvisories\u002FNUUO\u002Fnuuo_nvrmini_round2.mkd","GitHub",[63,64],"Exploit","Third Party Advisory",{"url":66,"source":61,"tags":67},"https:\u002F\u002Fgithub.com\u002Frapid7\u002Fmetasploit-framework\u002Fpull\u002F16044",[63,68,64],"Issue Tracking",{"url":70,"source":71,"tags":72},"https:\u002F\u002Fnews.ycombinator.com\u002Fitem?id=29936569","Ycombinator",[64],{"url":74,"source":75,"tags":76},"https:\u002F\u002Fportswigger.net\u002Fdaily-swig\u002Fresearcher-discloses-alleged-zero-day-vulnerabilities-in-nuuo-nvrmini2-recording-device","Portswigger",[63,64],{"url":60,"source":61,"tags":78},[63,64],{"url":66,"source":61,"tags":80},[63,68,64],{"url":70,"source":71,"tags":82},[64],{"url":74,"source":75,"tags":84},[63,64],{"url":86,"source":87,"tags":88},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2022-23227","CISA",[],9,[91],{"id":92,"name":93,"description":94,"extendedDescription":42,"status":95,"abstraction":96,"structure":97},"CWE-306","Missing Authentication for Critical Function","The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.","Draft","Base","Simple",1,{"shortDescription":42,"requiredAction":42,"vulnerabilityName":42,"dateAdded":27},[],{"title":102,"metaDescription":103,"keywords":104,"canonicalUrl":105,"structuredData":106},"What is CVE-2022-23227? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-23227, a critical severity cyber security vulnerability from 2022. High exploit probability (48.5%). NUUO NVRmini2 through...","CVE-2022-23227, CVE-2022-23227 vulnerability, CVE-2022-23227 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, nuuo security, nvrmini2_firmware vulnerability, nvrmini2 vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2022-23227",{"@context":107,"@type":108,"headline":102,"description":103,"datePublished":10,"dateModified":11,"author":109,"publisher":113,"about":117,"mainEntityOfPage":121,"articleSection":124,"keywords":125},"https:\u002F\u002Fschema.org","TechArticle",{"@type":110,"name":111,"url":112},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":110,"name":111,"url":112,"logo":114},{"@type":115,"url":116},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":118,"name":6,"description":119,"additionalType":120},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":122,"@id":123},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-23227","Cybersecurity","CVE-2022-23227, CVE-2022-23227 vulnerability, CVE-2022-23227 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[127],{"Operator":128,"Negate":27,"Nodes":129},"AND",[130,136],{"Operator":131,"Negate":43,"CPEMatch":132},"OR",[133],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":134,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":135},"472067E2-1E5F-4E94-86DD-0AFFA875579B","3.11.0",{"Operator":131,"Negate":43,"CPEMatch":137},[138],{"Vulnerable":43,"Criteria":56,"MatchCriteriaID":139,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"1532E39C-AADF-458F-9E21-C47197D1CB27",[],[142],{"id":143,"eventType":144,"eventTime":145,"details":146,"label":147,"color":148},"dcf7cd55-64b5-4eff-b68b-fb0c02c9addc","HIGH_EPSS_DELTA","2025-06-11T10:10:35.546695+00:00","Daily EPSS score increased by 0.125 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":150,"version":38},1792446679636,{"score":152,"band":46,"action":153,"scoredAt":154},90,"Emergency patch","2026-10-16T06:52:59.991559+00:00"]