CVE-2025-1338
HIGH EXPLOITED NUCLEINUUO Camera <20250203 - Command Injection
Title source: llmExploitation Summary
CVE-2025-1338 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 2 public exploits from researchers including iSee857, jxcaxtc. A Nuclei detection template is also available.
AI-analyzed exploit summary The repository contains a functional exploit for CVE-2026-22812, demonstrating remote command execution (RCE) via crafted JSON payloads to an OpenCode session endpoint. The script includes multi-threaded scanning capabilities and validates vulnerability by checking for command output containing 'uid=' and 'gid='.
Description
A vulnerability was found in NUUO Camera up to 20250203. It has been declared as critical. This vulnerability affects the function print_file of the file /handle_config.php. The manipulation of the argument log leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Exploits (2)
The repository contains a functional exploit for CVE-2026-22812, demonstrating remote command execution (RCE) via crafted JSON payloads to an OpenCode session endpoint. The script includes multi-threaded scanning capabilities and validates vulnerability by checking for command output containing 'uid=' and 'gid='.
The repository contains a functional Python script that exploits a command injection vulnerability in NUUO Camera's __debugging_center_utils___.php via the 'log' parameter. The script performs batch vulnerability detection with multi-threading and verifies exploitation by checking for 'uid=' and 'gid=' in the response.
Nuclei Templates (1)
http.title:"Network Video Recorder Login"
title="Network Video Recorder Login" || body="www.nuuo.com"
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L