What’s Vulnerable › Vulnerabilities

CVE-2018-19864

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 24.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-12-05 · updated 2026-06-17
• Weakness: CWE-20

Description

NUUO NVRmini2 Network Video Recorder firmware through 3.9.1 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow), resulting in ability to read camera feeds or reconfigure the device.

Affected products

• NUUO NVRMini2: through 3.9.1

References

• http://packetstormsecurity.com/files/153162/NUUO-NVRMini-2-3.9.1-Stack-Overflow.html
• https://www.digitaldefense.com/blog/zero-day-alerts/nuuo-firmware-disclosure/
• https://www.nuuo.com/DownloadMainpage.php
• http://packetstormsecurity.com/files/153162/NUUO-NVRMini-2-3.9.1-Stack-Overflow.html
• https://www.digitaldefense.com/blog/zero-day-alerts/nuuo-firmware-disclosure/
• https://www.nuuo.com/DownloadMainpage.php

Get alerted when CVE-2018-19864 or the next vulnerability affects your stack