Main
Vulnerability Database
Exploits
ID:6204 - Exploit for Arbitrary file upload in NUUO NVRmini 2 - CVE-2018-11523
ID:6204 - Exploit for Arbitrary file upload in NUUO NVRmini 2 - CVE-2018-11523
Published: June 17, 2021
Vulnerability identifier: #VU14816
Vulnerability risk: High
CVE-ID: CVE-2018-11523
CWE-ID: CWE-434
Exploitation vector: Remote access
Vulnerable software:
NUUO NVRmini 2
NUUO NVRmini 2
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to software allows upload of arbitrary files to the system in /nuuonvr.php script. A remote unauthenticated attacker can upload arbitrary file (e.g. with ".php" extension) and execute it on the server.
Remediation
Install updates from vendor's website.