Vendor

NUUO

2 of 6 NUUO CVEs in Patchfirst (33%) are in of vulnerabilities exploited in the wild.

CVEs: 6
In CISA KEV: 233%
Known ransomware use: 0
Median days to KEV: 1,698; from publication
Latest KEV listing: 18 Dec 2024

Watch NUUO Subscribe (RSS) JSON Feed All feeds

Products

In KEVOther CVEs

ProductKEVCVEs
NVRmini Devices In KEV: 1 CVEs: 1
NVRmini2 Devices In KEV: 1 CVEs: 1
NUUO NVRMini2 In KEV: 0 CVEs: 2
Camera In KEV: 0 CVEs: 1
NUUO CMS In KEV: 0 CVEs: 1

Top ATT&CK techniques

What attackers do with NUUO CVEs

TechniqueCVEs
T1190Exploit Public-Facing Application CVEs: 2
T1059Command and Scripting Interpreter CVEs: 2

Open in ATT&CK Navigator

A layer for MITRE’s ATT&CK Navigator: techniques scored by the highest Patchfirst priority among their CVEs, neutral to red, with the CVE ids in each comment. “Open in Navigator” loads https://patchfirst.co/navigator/vendor/nuuo.json. Or download it and in Navigator choose Open Existing Layer → Upload from local.

Counts are NUUO CVEs linked to the technique. Each link’s provenance is on the CVE page.

NUUO CVEs

6 CVEs, by priority

CVE-2025-1338NUUO Camera handle_config.php print_file command injection
NUUO · CameraPublic exploitHigh · 7.3
51.1%Top 1.1%
71.9priority
CVE-2018-14933NUUO NVRmini Devices OS Command Injection Vulnerability
NUUO · NVRmini DevicesKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing Application T1059Command and Scripting Interpreter
94.8%Top 0.14%
69.8priority
CVE-2022-23227NUUO NVRmini2 Devices Missing Authentication Vulnerability
NUUO · NVRmini2 DevicesKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing Application T1059Command and Scripting Interpreter
48.5%Top 1.1%
69.6priority
CVE-2018-1149cgi_system in NUUO's NVRMini2 3.8.0 and below allows remote attackers to execute arbitrary code via crafted HTTP…
NUUO · NUUO NVRMini2Public exploit1 report
15.1%Top 3.3%
28.2priority
CVE-2018-1150NUUO's NVRMini2 3.8.0 and below contains a backdoor that would allow an unauthenticated remote attacker to take over…
NUUO · NUUO NVRMini21 report
2.1%Top 18%
20.2priority
CVE-2018-17892NUUO CMS all versions 3.1 and prior, The application implements a method of user account control that causes standard…
NUUO · NUUO CMS
2.8%Top 14%
17.3priority