CVE-2019-9653

https://notcve.org/view.php?id=CVE-2019-9653

NUUO Network Video Recorder Firmware 1.7.x through 3.3.x allows unauthenticated attackers to execute arbitrary commands via shell metacharacters to handle_load_config.php. NUUO Network Video Recorder Firmware versión1.7.x hasta 3.3.x, permite a los atacantes no identificados ejecutar comandos arbitrarios por medio de metacaracteres shell en el archivo handle_load_config.php. • https://github.com/grayoneday/CVE-2019-9653 https://www.nccst.nat.gov.tw/NewsRSS?lang=en&RSSType=mssecurity https://www.nuuo.com/DownloadMainpage.php • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •