CVE-2022-23227

NUUO NVRmini2 through 3.11 allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users because of the lack of handle_import_user.php authentication. When combined with another flaw (CVE-2011-5325), it is possible to overwrite arbitrary files under the web root and achieve code execution as root.

• CWE-306
• CWE-306

• https://github.com/pedrib/PoC/blob/master/advisories/NUUO/nuuo_nvrmini_round2.mkdExploit, Third Party Advisory
• https://github.com/rapid7/metasploit-framework/pull/16044Exploit, Issue Tracking, Third Party Advisory
• https://news.ycombinator.com/item?id=29936569Third Party Advisory
• https://portswigger.net/daily-swig/researcher-discloses-alleged-zero-day-vulnerabilities-in-nuuo-nvrmini2-recording-deviceExploit, Third Party Advisory
• https://github.com/pedrib/PoC/blob/master/advisories/NUUO/nuuo_nvrmini_round2.mkdExploit, Third Party Advisory
• https://github.com/rapid7/metasploit-framework/pull/16044Exploit, Issue Tracking, Third Party Advisory
• https://news.ycombinator.com/item?id=29936569Third Party Advisory
• https://portswigger.net/daily-swig/researcher-discloses-alleged-zero-day-vulnerabilities-in-nuuo-nvrmini2-recording-deviceExploit, Third Party Advisory
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-23227US Government Resource

Published

Jan 14, 2022

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-23218The deprecated compatibility function svcunix_create in the …9.8
• CVE-2022-23219The deprecated compatibility function clnt_create in the sun…9.8
• CVE-2022-23220USBView 2.1 before 2.2 allows some local users (e.g., ones l…7.8
• CVE-2022-23221H2 Console before 2.1.210 allows remote attackers to execute…9.8
• CVE-2022-23222kernel/bpf/verifier.c in the Linux kernel through 5.15.14 al…7.8
• CVE-2022-23223On Apache ShenYu versions 2.4.0 and 2.4.1, and endpoint exis…7.5
• CVE-2022-23228Pexip Infinity before 27.0 has improper WebRTC input validat…7.5
• CVE-2022-2323Improper neutralization of special elements used in a user i…8.8
• CVE-2022-23232StorageGRID (formerly StorageGRID Webscale) versions prior t…4.9
• CVE-2022-23233StorageGRID (formerly StorageGRID Webscale) versions prior t…7.5
• CVE-2022-23234SnapCenter versions prior to 4.5 are susceptible to a vulner…5.5
• CVE-2022-23235Active IQ Unified Manager for VMware vSphere, Linux, and Mic…5.3