CVE-2019-9653

Name of the Vulnerable Software and Affected Versions NUUO Network Video Recorder Firmware versions 1.7.x through 3.3.x

Description The issue allows unauthenticated attackers to execute arbitrary commands. This is achieved by using shell metacharacters in the handle load config.php file.

Recommendations For versions 1.7.x through 3.3.x, update to a version that contains a fix for this issue to prevent arbitrary command execution. As a temporary workaround, consider restricting access to the handle load config.php file until a patch is available.