CVE-2016-5679

High

Published: 31/08/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

In NUUO NVRmini 2 versions 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance version 1.1.2, remote authenticated users can execute arbitrary commands via shell metacharacters in the sn parameter to the transfer_license command.

Risk Assessment

This vulnerability may lead to unauthorized access and execution of malicious code on the server, posing a serious security threat to the system.

Recommendation

It is recommended to update the software to the latest version to eliminate this vulnerability and restrict access to the interface for remote users.

Other vulnerabilities in NUUO NVRmini 2, NETGEAR ReadyNAS Surveillance

CVE-2016-5680High
A stack-based buffer overflow exists in NUUO NVRmini 2 versions 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance version 1.1.2 in cgi-bin/cgi_main. This allows remote authenticated users to execute arbitrary code via the sn parameter to the transfer_license command.

Original NVD description (English source)

cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the sn parameter to the transfer_license command.