Exploited Vulnerabilities DailyCVE-2022-23227: NUUO NVRmini2 Devices
EPSS48.4%No. 881 of 1739 in KEV
CVE year2022~2 yrs before listing
Same vendor in KEV2
Same product1
| Field | Value |
|---|---|
| Vendor | NUUO |
| Product | NVRmini2 Devices |
| Name | NUUO NVRmini2 Devices Missing Authentication Vulnerability |
| Added to KEV | 2024-12-18 |
| US federal due date | 2025-01-08 |
| Ransomware use | Unknown |
| CWE | CWE-306 |
CISA description
NUUO NVRmini2 devices contain a missing authentication vulnerability that allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users.
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A NUUO NVRmini2 Devices vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2024-12-18.