CVE-2018-15716
28Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 18%
from disclosure to weapon4 days
Published on NVDNov 30
1st PoC+4d
exploitation probability
18%top 3% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
NUUO NVRMini2 version 3.9.1 is vulnerable to authenticated remote command injection. An attacker can send crafted requests to upgrade_handle.php to execute OS commands as root.
Affected products
NUUO · NUUO NVRMini2public PoCs found — 2
exploitdbwww.exploit-db.com/exploits/45948unverifiedcve_referencewww.exploit-db.com/exploits/45948/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.