Lucene search
MitreCVELIST:CVE-2022-23227HistoryJan 14, 2022 - 5:13 p.m.
CVE-2022-23227
2022-01-1417:13:57
mitre
www.cve.org
12
nuuo nvrmini2
unauthenticated upload
encrypted tar archive
arbitrary users
handle_import_user.php
authentication
web root
code execution
NUUO NVRmini2 through 3.11 allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users because of the lack of handle_import_user.php authentication. When combined with another flaw (CVE-2011-5325), it is possible to overwrite arbitrary files under the web root and achieve code execution as root.
Related
nvd
nvd
CVE-2022-23227
2022-01-14 18:15:10
CVE-2011-5325
2017-08-07 17:29:00
openvas
openvas
NUUO NVRmini 2 <= 03.11.0000.0016 RCE Vulnerability - Active Check
2022-01-18 00:00:00
openSUSE: Security Advisory for busybox (openSUSE-SU-2021:3531-1)
2021-10-28 00:00:00
cve
cve
CVE-2022-23227
2022-01-14 18:15:10
CVE-2011-5325
2017-08-07 17:29:00
prion
prion
Design/Logic Flaw
2022-01-14 18:15:00
Directory traversal
2017-08-07 17:29:00
debian
debian
[SECURITY] [DLA 1445-3] busybox regression update
2018-08-03 05:18:30
[SECURITY] [DLA 1445-1] busybox security update
2018-07-27 04:39:37
[SECURITY] [DLA 2559-1] busybox security update
2021-02-15 11:56:52
ubuntucve
ubuntucve
CVE-2011-5325
2017-08-07 00:00:00
nessus
nessus
Debian DLA-1445-3 : busybox regression update
2018-07-27 00:00:00
RHEL 4 : busybox (Unpatched Vulnerability)
2024-06-03 00:00:00
openSUSE 15 Security Update : busybox (openSUSE-SU-2021:1408-1)
2021-11-01 00:00:00
veracode
veracode
Directory Traversal
2021-02-15 22:51:22
cvelist
cvelist
CVE-2011-5325
2017-08-07 17:00:00
debiancve
debiancve
CVE-2011-5325
2017-08-07 17:29:00
cnvd
cnvd
NUUO NVRmini2 licensing issue vulnerability
2022-01-17 00:00:00
suse
suse
Security update for busybox (important)
2021-10-27 00:00:00
Security update for busybox (important)
2021-10-31 00:00:00
Security update for busybox (important)
2022-05-18 00:00:00
osv
osv
busybox - security update
2021-02-15 00:00:00
busybox - security update
2018-07-27 00:00:00
busybox-1.35.0-1.1 on GA media
2024-06-15 00:00:00
packetstorm
packetstorm
ZTE Mobile Hotspot MS910S Backdoor / Hardcoded Password
2020-08-27 00:00:00
cloudfoundry
cloudfoundry
USN-3935-1: BusyBox vulnerabilities | Cloud Foundry
2019-04-12 00:00:00
ubuntu
ubuntu
BusyBox vulnerabilities
2019-04-03 00:00:00