Vulnerabilities CVE-2022-23227

CVE-2022-23227

Medium

Open

KEV

TLP:CLEAR

NUUO NVRmini2 Devices Missing Authentication Vulnerability

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

NUUO — NVRmini2 Devices — NUUO NVRmini2 devices contain a missing authentication vulnerability that allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users.

Details

EPSS Score ⓘ: 49.43%

98.8th percentile
Confidence: 100%
CISA KEV
Date Added: Dec 18, 2024
Patch Due: Jan 8, 2025
Required Action: The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.