CVE-2022-25521
https://notcve.org/view.php?id=CVE-2022-25521
NUUO v03.11.00 was discovered to contain access control issue. Se ha detectado que NUUO v03.11.00 contiene un problema de control de acceso. • http://nuuo.com https://medium.com/%40dnyaneshgawande111/use-of-default-credentials-to-unauthorised-remote-access-of-internal-panel-of-network-video-5490d107fa0 • CWE-798: Use of Hard-coded Credentials •
CVE-2019-9653
https://notcve.org/view.php?id=CVE-2019-9653
NUUO Network Video Recorder Firmware 1.7.x through 3.3.x allows unauthenticated attackers to execute arbitrary commands via shell metacharacters to handle_load_config.php. NUUO Network Video Recorder Firmware versión1.7.x hasta 3.3.x, permite a los atacantes no identificados ejecutar comandos arbitrarios por medio de metacaracteres shell en el archivo handle_load_config.php. • https://github.com/grayoneday/CVE-2019-9653 https://www.nccst.nat.gov.tw/NewsRSS?lang=en&RSSType=mssecurity https://www.nuuo.com/DownloadMainpage.php • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •