High severity8.8NVD Advisory· Published Nov 30, 2018· Updated Jun 17, 2026
CVE-2018-15716
CVE-2018-15716
Description
NUUO NVRMini2 version 3.9.1 is vulnerable to authenticated remote command injection. An attacker can send crafted requests to upgrade_handle.php to execute OS commands as root.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:o:nuuo:nvrmini2_firmware:3.9.1:*:*:*:*:*:*:*
- NUUO/NUUO NVRMini2v5Range: 3.9.1
Patches
Vulnerability mechanics
References
4- github.com/tenable/poc/tree/master/nuuo/nvrmini2/cve_2018_15716nvdExploitThird Party Advisory
- www.exploit-db.com/exploits/45948/nvdExploitThird Party AdvisoryVDB Entry
- www.tenable.com/security/research/tra-2018-41nvdExploitThird Party Advisory
- www.securityfocus.com/bid/106059nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.