Unrated severityNVD Advisory· Published Nov 30, 2018· Updated Sep 16, 2024

CVE-2018-15716

Description

NUUO NVRMini2 version 3.9.1 is vulnerable to authenticated remote command injection. An attacker can send crafted requests to upgrade_handle.php to execute OS commands as root.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Nuuo/Nvrmini 2llm-fuzzy
Range: =3.9.1
NUUO/NUUO NVRMini2v5
Range: 3.9.1

Patches

Vulnerability mechanics

References

www.exploit-db.com/exploits/45948/mitreexploitx_refsource_EXPLOIT-DB
www.securityfocus.com/bid/106059mitrevdb-entryx_refsource_BID
github.com/tenable/poc/tree/master/nuuo/nvrmini2/cve_2018_15716mitrex_refsource_MISC
www.tenable.com/security/research/tra-2018-41mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.015
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000