CVE-2018-11523: Malicious File Upload
Published May 29, 2018
·Updated
upload.php on NUUO NVRmini 2 devices allows Arbitrary File Upload, such as upload of .php files.
Affected Software
2 affected components
NUUO Nvrmini 2 Firmware<=3.6.5
NUUO NVRmini 2
Event History
May 29, 2018
CVE Published
via MITRE·07:00 AM
Data Sourced
via MITRE·07:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-11523?
CVE-2018-11523 is considered a critical vulnerability due to the potential for arbitrary file uploads which can lead to remote code execution.
2
How do I fix CVE-2018-11523?
To fix CVE-2018-11523, update the NUUO NVRmini 2 firmware to a version later than 3.6.5.
3
What type of devices are affected by CVE-2018-11523?
CVE-2018-11523 affects NUUO NVRmini 2 devices running firmware version 3.6.5 or earlier.
4
What kind of files can be uploaded due to CVE-2018-11523?
CVE-2018-11523 allows for arbitrary file uploads, including potentially malicious .php files.
5
What are the risks associated with CVE-2018-11523?
The risks of CVE-2018-11523 include unauthorized access, data breaches, and remote code execution leading to compromised systems.