Description
NUUO Network Video Recorder（NVR）是中国台湾NUUO公司的一款网络视频记录器。 使用1.7.x版本至3.3.x版本固件的NUUO NVR中存在安全漏洞。攻击者可通过向handle_load_config.php文件发送shell元字符利用该漏洞执行任意命令。
NUUO Network Video Recorder 命令注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.sentinelone.com/vulnerability-database/cve-2025-1338/
https://stack.chaitin.com/vuldb/detail/0f6e3a88-0823-4061-bd32-1c3c96b63b3d
https://www.cnblogs.com/0neOr2eR0/p/18726215
https://www.twcert.org.tw/newepaper/cp-67-2825-5b9b9-3.html
https://www.kb.cert.org/vuls/id/856152
https://nvd.nist.gov/vuln/detail/cve-2019-9653
https://www.tenable.com/blog/tenable-research-advisory-peekaboo-critical-vulnerability-in-nuuo-network-video-recorder
https://nsfocusglobal.com/vulnerabilities-discovered-in-nuuo-network-video-recorder/
https://www.cctvcalculator.net/en/knowledges/vulnerability-database/
https://feedly.com/cve/CVE-2019-9653