CVE-2019-9653

Опубликовано: 31 мая 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Высокий

Описание

NUUO Network Video Recorder Firmware 1.7.x through 3.3.x allows unauthenticated attackers to execute arbitrary commands via shell metacharacters to handle_load_config.php.

Ссылки

https://github.com/grayoneday/CVE-2019-9653
Exploit
Third Party Advisory
https://www.nccst.nat.gov.tw/NewsRSS?lang=en&RSSType=mssecurity
Third Party Advisory
https://www.nuuo.com/DownloadMainpage.php
Product
Vendor Advisory
https://github.com/grayoneday/CVE-2019-9653
Exploit
Third Party Advisory
https://www.nccst.nat.gov.tw/NewsRSS?lang=en&RSSType=mssecurity
Third Party Advisory
https://www.nuuo.com/DownloadMainpage.php
Product
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:nuuo:network_video_recorder_firmware:*:*:*:*:*:*:*:*

Версия от 1.7.0 (включая) до 3.3.0 (включая)

cpe:2.3:h:nuuo:network_video_recorder:-:*:*:*:*:*:*:*

EPSS

Процентиль: 99%

0.73986

Высокий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-78

Связанные уязвимости

GHSA-6cp9-w78f-4qmw