CVE Catalog
CVE-2016-5678
CriticalSummary
NUUO NVRmini 2 versions 1.0.0 through 3.0.0 and NUUO NVRsolo versions 1.0.0 through 3.0.0 have hardcoded root credentials, allowing remote attackers to gain administrative access via unspecified vectors.
Risk Assessment
The presence of hardcoded credentials poses a significant security risk, enabling attackers to take control of the device.
Recommendation
It is recommended to update the software to the latest version that removes hardcoded credentials and to implement additional security measures.
Original NVD description (English source)
NUUO NVRmini 2 1.0.0 through 3.0.0 and NUUO NVRsolo 1.0.0 through 3.0.0 have hardcoded root credentials, which allows remote attackers to obtain administrative access via unspecified vectors.