{"id":"CVE-2025-1338","published":"2025-02-16T11:00:20Z","modified":"2025-02-18T16:10:54Z","title":"NUUO Camera handle_config.php print_file command injection","vendor":"NUUO","product":"Camera","tier":"core","eol":null,"affectedVersions":[{"vendor":"NUUO","product":"Camera","versions":["20250203"]}],"description":{"text":"A vulnerability was found in NUUO Camera up to 20250203. It has been declared as critical. This vulnerability affects the function print_file of the file /handle_config.php. The manipulation of the argument log leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","provenance":"source","from":"CVE.org"},"summary":{"text":"A command injection flaw in the print_file function of /handle_config.php in NUUO Camera products, where the log argument is not properly neutralised before being used in a command. An unauthenticated remote attacker, requiring no user interaction and no special configuration, can inject operating system commands through that argument, with low impact to confidentiality, integrity and availability.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T13:44:42Z"},"cvss":{"score":7.3,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.51116,"percentile":0.9893,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2026-04-09","exploitedFirstSeen":"2026-04-09","ransomware":false,"evidence":[{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-04-09&host_type=src&vulnerability=cve-2025-1338","date":"2026-04-09"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-04-13&host_type=src&vulnerability=cve-2025-1338","date":"2026-04-13"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-04-18&host_type=src&vulnerability=cve-2025-1338","date":"2026-04-18"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-04-21&host_type=src&vulnerability=cve-2025-1338","date":"2026-04-21"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-04-22&host_type=src&vulnerability=cve-2025-1338","date":"2026-04-22"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-04-23&host_type=src&vulnerability=cve-2025-1338","date":"2026-04-23"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-04-24&host_type=src&vulnerability=cve-2025-1338","date":"2026-04-24"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-04-26&host_type=src&vulnerability=cve-2025-1338","date":"2026-04-26"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-04-27&host_type=src&vulnerability=cve-2025-1338","date":"2026-04-27"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-04-28&host_type=src&vulnerability=cve-2025-1338","date":"2026-04-28"}],"evidenceTotal":94,"provenance":"source"},"exploited":true,"otx":{"pulseCount":7,"pulses":[{"name":"EbeeDec2025 Pt2","url":"https://otx.alienvault.com/pulse/693ac21225c36da419dbd4f1","created":"2025-12-11"},{"name":"China-nexus cyber threat groups rapidly exploit React2Shell vulnerability","url":"https://otx.alienvault.com/pulse/6937a6bab62d98b3d376e543","created":"2025-12-09"},{"name":"China-nexus cyber threat groups rapidly exploit React2Shell vulnerability (CVE-2025-55182)","url":"https://otx.alienvault.com/pulse/693688e4a45262398e2d9c7d","created":"2025-12-08"},{"name":"China-nexus cyber threat groups rapidly exploit React2Shell vulnerability (CVE-2025-55182)","url":"https://otx.alienvault.com/pulse/693671770123a35102570df9","created":"2025-12-08"},{"name":"China-nexus cyber threat groups rapidly exploit React2Shell vulnerability (CVE-2025-55182)","url":"https://otx.alienvault.com/pulse/69365f86aa8a7c1e7f087488","created":"2025-12-08"},{"name":"CVE-2025-55182 React2Shell indicators of compromise","url":"https://otx.alienvault.com/pulse/6933fc2685df8a7f52446769","created":"2025-12-06"},{"name":"China-nexus cyber threat groups rapidly exploit React2Shell vulnerability (CVE-2025-55182)","url":"https://otx.alienvault.com/pulse/69331d05a7d525a2c1cf508c","created":"2025-12-05"}],"provenance":"machine"},"cwes":[{"id":"CWE-77","name":"Improper Neutralization of Special Elements used in a Command"},{"id":"CWE-74","name":"Improper Neutralization of Special Elements in Output Used by a Downstream Component"}],"references":[{"url":"https://vuldb.com/?id.295954","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/?ctiid.295954","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/?submit.493912","tags":["third-party-advisory"]},{"url":"https://pan.baidu.com/s/1YW52iM0ehUfFKa_CiTHBjQ?from=init&pwd=kqec","tags":["exploit"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2025-2109","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-2109","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":1,"skipped":0,"earliest":"2025-10-04","earliestUrl":"https://github.com/jxcaxtc/CVE-2025-1338","repos":[{"name":"jxcaxtc/CVE-2025-1338","url":"https://github.com/jxcaxtc/CVE-2025-1338","stars":2,"created":"2025-10-04"}]},"nuclei":[{"id":"CVE-2025-1338","name":"NUUO Camera <=20250203 - OS Command Injection","severity":"critical","path":"http/cves/2025/CVE-2025-1338.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1338.yaml"}],"first":{"date":"2025-10-04","source":"PoC-in-GitHub","url":"https://github.com/jxcaxtc/CVE-2025-1338"},"provenance":"source"},"exploitRefs":["https://pan.baidu.com/s/1YW52iM0ehUfFKa_CiTHBjQ?from=init&pwd=kqec"],"flow":[],"timeline":[{"date":"2025-02-16","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2025-1338","provenance":"source"},{"date":"2025-10-04","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub","url":"https://github.com/jxcaxtc/CVE-2025-1338","provenance":"source"},{"date":"2026-04-09","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-04-09&host_type=src&vulnerability=cve-2025-1338","provenance":"source"}],"speed":{"daysToPublicExploit":230,"firstExploitFrom":"PoC-in-GitHub","daysToKev":null},"priority":{"score":71.9,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":5.0,"detail":"added 204 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.79,"detail":"percentile 0.9893"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 NVD reference tagged Exploit; 1 PoC-in-GitHub repo; 1 nuclei template"},{"name":"Mentioned in OTX pulses","points":2.05,"detail":"7 pulses"},{"name":"CVSS severity","points":5.11,"detail":"base score 7.3"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}