← Back to browse · API

CVE-2018-14933

Severity
CRITICAL
CVSS
9.8
EPSS
0.94884
Risk score
58.21
CISA KEV
Yes
PoC
No
Published
2018-08-04
Modified
2025-10-21
First seen
2026-08-07
Aliases
EUVD-2018-6815, GHSA-XQGH-QJ2V-FJFX
Products
NUUO:NVRmini Devices, n/a:n/a n/a
Sources
cisa.gov CVE-2018-14933
euvd EUVD-2018-6815

Description

upgrade_handle.php on NUUO NVRmini devices allows Remote Command Execution via shell metacharacters in the uploaddir parameter for a writeuploaddir command.

References