CVE-2018-14933

Description

upgrade_handle.php on NUUO NVRmini devices allows Remote Command Execution via shell metacharacters in the uploaddir parameter for a writeuploaddir command.

Severity: CRITICAL

CVSS Score: 9.8