Lucene search
PRIOn knowledge basePRION:CVE-2022-23227HistoryJan 14, 2022 - 6:15 p.m.
Design/Logic Flaw
2022-01-1418:15:00
PRIOn knowledge base
www.prio-n.com
6
NUUO NVRmini2 through 3.11 allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users because of the lack of handle_import_user.php authentication. When combined with another flaw (CVE-2011-5325), it is possible to overwrite arbitrary files under the web root and achieve code execution as root.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nvrmini2_firmware | le | 3.11.0 |
Related
nvd
nvd
CVE-2022-23227
2022-01-14 18:15:10
CVE-2011-5325
2017-08-07 17:29:00
cve
cve
CVE-2022-23227
2022-01-14 18:15:10
CVE-2011-5325
2017-08-07 17:29:00
openvas
openvas
NUUO NVRmini 2 <= 03.11.0000.0016 RCE Vulnerability - Active Check
2022-01-18 00:00:00
openSUSE: Security Advisory for busybox (openSUSE-SU-2021:3531-1)
2021-10-28 00:00:00
cvelist
cvelist
CVE-2022-23227
2022-01-14 17:13:57
CVE-2011-5325
2017-08-07 17:00:00
debiancve
debiancve
CVE-2011-5325
2017-08-07 17:29:00
nessus
nessus
Debian DLA-1445-3 : busybox regression update
2018-07-27 00:00:00
RHEL 4 : busybox (Unpatched Vulnerability)
2024-06-03 00:00:00
openSUSE 15 Security Update : busybox (openSUSE-SU-2021:1408-1)
2021-11-01 00:00:00
ubuntucve
ubuntucve
CVE-2011-5325
2017-08-07 00:00:00
veracode
veracode
Directory Traversal
2021-02-15 22:51:22
debian
debian
[SECURITY] [DLA 1445-3] busybox regression update
2018-08-03 05:18:30
[SECURITY] [DLA 1445-1] busybox security update
2018-07-27 04:39:37
[SECURITY] [DLA 2559-1] busybox security update
2021-02-15 11:56:52
cnvd
cnvd
NUUO NVRmini2 licensing issue vulnerability
2022-01-17 00:00:00
prion
prion
Directory traversal
2017-08-07 17:29:00
suse
suse
Security update for busybox (important)
2021-10-31 00:00:00
Security update for busybox (important)
2021-10-27 00:00:00
Security update for busybox (important)
2022-05-18 00:00:00
osv
osv
busybox - security update
2021-02-15 00:00:00
busybox - security update
2018-07-27 00:00:00
packetstorm
packetstorm
ZTE Mobile Hotspot MS910S Backdoor / Hardcoded Password
2020-08-27 00:00:00
cloudfoundry
cloudfoundry
USN-3935-1: BusyBox vulnerabilities | Cloud Foundry
2019-04-12 00:00:00
ubuntu
ubuntu
BusyBox vulnerabilities
2019-04-03 00:00:00