NUUO NVRmini 2 3.0.8 Local File Disclosure

The NUUO NVRmini 2 is a small and portable NVR having NAS capabilities. A file disclosure vulnerability exists in NUUO NVRmini, NVRmini2, Crystal, and NVRSolo. when input passes through the ‘css’ parameter to ‘css_parser.php’ script is not appropriately verified before being used to include files. This can be used to reveal the contents of files stored on local resources.

Mitigation / Precaution

In order to patch this vulnerability, Update NUUO NVRmini 2 to latest version.

Written by

Anandhu K A

Lead Engineer

With a profound understanding of product development, Anandhu plays a pivotal role in crafting cutting-edge solutions that cater to the evolving security needs of digital applications. His expertise, deeply rooted in both engineering and security, makes him an essential component of Beagle Security's mission