CVE-2018-15716 : NUUO NVRMini2 version 3.9.1 is vulnerable to authenticated remote command injection. An attacker can send crafted reques

NUUO NVRMini2 version 3.9.1 is vulnerable to authenticated remote command injection. An attacker can send crafted requests to upgrade_handle.php to execute OS commands as root.

Published 2018-11-30 20:29:00

Updated 2019-10-09 23:35:50

Source Tenable Network Security, Inc.

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2018-15716

EPSS FAQ

9.51%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 95 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-15716

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
9.0	HIGH	AV:N/AC:L/Au:S/C:C/I:C/A:C	8.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
8.8	HIGH	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	2.8	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2018-15716

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Assigned by:

nvd@nist.gov (Primary)
vulnreport@tenable.com (Secondary)

References for CVE-2018-15716

https://github.com/tenable/poc/tree/master/nuuo/nvrmini2/cve_2018_15716

poc/nuuo/nvrmini2/cve_2018_15716 at master · tenable/poc · GitHub
Exploit;Third Party Advisory
http://www.securityfocus.com/bid/106059

NUUO NVRmini Products CVE-2018-15716 Incomplete Fix Remote Command Injection Vulnerability
Third Party Advisory;VDB Entry
https://www.exploit-db.com/exploits/45948/

NUUO NVRMini2 3.9.1 - (Authenticated) Command Injection
Exploit;Third Party Advisory;VDB Entry
https://www.tenable.com/security/research/tra-2018-41

[R1] NUUO NVRMini2 Authenticated Command Injection - Research Advisory | Tenable®
Exploit;Third Party Advisory

Products affected by CVE-2018-15716

Nuuo » Nvrmini2 Firmware » Version: 3.9.1
cpe:2.3:o:nuuo:nvrmini2_firmware:3.9.1:*:*:*:*:*:*:*
Matching versions
When used together with: Nuuo » Ne-2020 » Version: N/A
When used together with: Nuuo » Ne-2040 » Version: N/A
When used together with: Nuuo » Ne-4080 » Version: N/A
When used together with: Nuuo » Ne-4160 » Version: N/A

Vulnerability Details : CVE-2018-15716

Exploit prediction scoring system (EPSS) score for CVE-2018-15716

CVSS scores for CVE-2018-15716

CWE ids for CVE-2018-15716

References for CVE-2018-15716

Products affected by CVE-2018-15716