CVE-2018-15716

Summary: 
NUUO NVRMini2 version 3.10.0 and earlier is vulnerable to authenticated remote command injection. An attacker can send crafted requests to upgrade_handle.php to execute OS commands as root.
Published: 
Friday, November 30, 2018 - 15:29
cvss: