ZeusQA
Start free

Known exploited vulnerabilities

NUUO vulnerabilities attackers have used

Every NUUO vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 2 NUUO vulnerabilities as exploited in the wild, 0 of them added in the last 12 months. The most recent is CVE-2022-23227, added Dec 18, 2024. NVRmini Devices has the most entries (1).

In KEV, all time
2
Added, last 12 months
0
Used in ransomware
0
New CVEs this week
0

By product

NVRmini Devices (1), NVRmini2 Devices (1).

Every NUUO entry in CISA KEV

  1. CVE-2022-23227

    Added · due

    NUUO NVRmini2 Devices Missing Authentication Vulnerability

    NUUO NVRmini2 devices contain a missing authentication vulnerability that allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users.

  2. CVE-2018-14933

    Added · due

    NUUO NVRmini Devices OS Command Injection Vulnerability

    NUUO NVRmini devices contain an OS command injection vulnerability. This vulnerability allows remote command execution via shell metacharacters in the uploaddir parameter for a writeuploaddir command.

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works