10

CVE-2022-23227

Warning
Exploit

NUUO NVRmini2 through 3.11 allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users because of the lack of handle_import_user.php authentication. When combined with another flaw (CVE-2011-5325), it is possible to overwrite arbitrary files under the web root and achieve code execution as root.

Data is provided by the National Vulnerability Database (NVD)
Nuuo ≫ Nvrmini2 Firmware Version <= 3.11.0
   Nuuo ≫ Nvrmini2 Version-

18.12.2024: CISA Known Exploited Vulnerabilities (KEV) Catalog

NUUO NVRmini2 Devices Missing Authentication Vulnerability

Vulnerability

NUUO NVRmini2 devices contain a missing authentication vulnerability that allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users.

Description

The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.

Required actions
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 52.85% 0.979
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
134c704f-9b21-4f2e-91b3-4a467353bcc0 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-306 Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

https://github.com/rapid7/metasploit-framework/pull/16044
Third Party Advisory
Exploit
Issue Tracking