NUUO NVRMini Command Injection (CVE-2018-14933; CVE-2018-15716)

Related Vulnerabilities: CVE-2018-14933   CVE-2018-15716  

Check Point Reference: CPAI-2018-2636 Date Published: 4 Dec 2023 Severity: Critical Last Updated: Monday 04 December, 2023 Source: Industry Reference:CVE-2018-14933
CVE-2018-15716
Protection Provided by:

Security Gateway
R81, R80, R77, R75

Who is Vulnerable? NUUO NVRmini firmware 2016
NUUO NVRMini 2 version 3.9.1
NUUO NE-2020 NVRmini 2
NUUO NE-2040 NVRmini 2
NUUO NE-4080 NVRmini 2
NUUO NE-4160 NVRmini 2 Vulnerability Description A command injection vulnerability exists in NUUO NVRMini. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system.