Browse / CVEs / CVE-2022-23227
CVE-2022-23227· nuuo / nvrmini2 devices· CWE-306
NUUO NVRmini2 Devices Missing Authentication Vulnerability
Exploited in the wild. Listed by CISA on 2024-12-18; known to be used by ransomware.
48.5%likelihood of exploitation, next 30 days
99%of all CVEs are less likely
Nonecheck to confirm it
NUUO NVRmini2 devices contain a missing authentication vulnerability that allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users.
No ready check is stored for this CVE. Confirm it by hand from the references.
References
Use this check only on systems you are authorised to test. Where the data comes from