CVE-2022-23227—NUUO NVRmini2 Devices Missing Authentication Vulnerability

PUBLISHEDvulnerability record
2024-12-18 · last modified June 21, 2025

Metadata

CVE ID：
CVE-2022-23227
项目：
NUUO
产品：
NVRmini2 Devices
添加日期：
2024-12-18
到期日：
2025-01-08
最后更新：
June 21, 2025

漏洞名称

NUUO NVRmini2 Devices Missing Authentication Vulnerability

描述

NUUO NVRmini2 devices contain a missing authentication vulnerability that allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users.

已知用于勒索软件活动吗？

勒索软件状态：
Unknown

采集行动

The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.

其他说明

  • https://nuuo.com/wp-content/uploads/2023/03/NUUO-EOL-letter＿NVRmini-2-and-NVRsolo-series.pdf
  • https://nvd.nist.gov/vuln/detail/CVE-2022-23227

相关 CWE

browse all CVEs