CVE-2016-5680

High

Published: 31/08/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A stack-based buffer overflow exists in NUUO NVRmini 2 versions 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance version 1.1.2 in cgi-bin/cgi_main. This allows remote authenticated users to execute arbitrary code via the sn parameter to the transfer_license command.

Risk Assessment

This vulnerability poses a serious risk to organizations as it allows remote code execution by authenticated users, potentially leading to system compromise.

Recommendation

It is recommended to update the software to the latest version to mitigate this vulnerability and to monitor system access for potential exploitation attempts.

Other vulnerabilities in NUUO NVRmini 2, NETGEAR ReadyNAS Surveillance

CVE-2016-5679High
In NUUO NVRmini 2 versions 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance version 1.1.2, remote authenticated users can execute arbitrary commands via shell metacharacters in the sn parameter to the transfer_license command.

Original NVD description (English source)

Stack-based buffer overflow in cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote authenticated users to execute arbitrary code via the sn parameter to the transfer_license command.