GobyVuls/NUUO_NVR___debugging_center_utils___.php_Command_Execution.md

1.1 KiB

NUUO NVR debugging_center_utils_.php Command Execution

  Vulnerability NUUO NVR debugging_center_utils_.php Command Execution
 Chinese name NUUO NVR 摄像机 debugging_center_utils_.php 命令执行漏洞
CVSS core 9.0
FOFA Query (click to view the results directly) title="Network Video Recorder Login"
Number of assets affected 10146
Description The NUUO NVR video storage management device debugging_center_utils_.php has an unauthorized remote command execution vulnerability. An attacker can execute arbitrary system commands without any permissions, thereby invading the server and obtaining administrator permissions on the server.
Impact Attackers can use this vulnerability to arbitrarily execute code on the server side, write backdoors, obtain server permissions, and then control the entire web server.<