CVE-2022-23227

Severity

high · on CISA KEV actively exploited

Source

CISA-KEV · kev

Published

2024-12-18

Reference

https://nvd.nist.gov/vuln/detail/CVE-2022-23227

⌖ exploited in the wild shame 50/100 exploited-in-wild

NUUO NVRmini2 devices contain a missing authentication vulnerability that allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users.

Players implicated

nuuo · vendor NVRmini2 Devices · product

Description

NUUO NVRmini2 devices contain a missing authentication vulnerability that allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.