CVE-2019-9653 NUUO Network Video Recorder Firmware 1.7.x through 3.3.x allows unauthenticated attackers to execute arbitrary commands via shell metacharacters to handle_load_config.php.
CriticalCVSS 9.8
EPSS 11.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
NUUO Network Video Recorder Firmware 1.7.x through 3.3.x allows unauthenticated attackers to execute arbitrary commands via shell metacharacters to handle_load_config.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nuuo network video recorder firmware | >= 1.7.0, <= 3.3.0 | No fix listed |
References
- github.com exploit third-party-advisory
- www.nccst.nat.gov.tw third-party-advisory
- www.nuuo.com product vendor-advisory