← Back to CVE List
CVE-2018-15716
NUUO NVRMini2 version 3.9.1 is vulnerable to authenticated remote command injection. An attacker can send crafted requests to upgrade_handle.php to execute OS commands as root.
> MITRE Terms of Use apply – see LICENSE‑MITRE.txt