Loading
upload.php on NUUO NVRmini 2 devices allows Arbitrary File Upload, such as upload of .php files.
Use CWE-434, Nuuo vendor hub and Nvrmini 2 Firmware product page to widen CVE-2018-11523 into its surrounding weakness, vendor, and product context.