NUUO NVRmini 2, NUUO NVRsolo, NETGEAR ReadyNAS Surveillance vulnerabilities
3 known CVE vulnerabilities in NUUO NVRmini 2, NUUO NVRsolo, NETGEAR ReadyNAS Surveillance, translated and rated.
- CVE-2016-5677High
NUUO NVRmini 2 versions 1.7.5 through 3.0.0, NUUO NVRsolo versions 1.0.0 through 3.0.0, and NETGEAR ReadyNAS Surveillance versions 1.1.1 through 1.4.1 have a hardcoded password qwe23622260 for the nuuoeng account, allowing remote attackers to obtain sensitive information via an __nvr_status___.php request.
- CVE-2016-5676High
In NUUO NVRmini 2 versions 1.7.5 through 2.x, NUUO NVRsolo versions 1.7.5 through 2.x, and NETGEAR ReadyNAS Surveillance versions 1.1.1 through 1.4.1, a vulnerability allows remote attackers to reset the administrator password via a cmd=loaddefconfig action.
- CVE-2016-5674Critical
__debugging_center_utils___.php in NUUO NVRmini 2 versions 1.7.5 through 3.0.0, NUUO NVRsolo versions 1.7.5 through 3.0.0, and NETGEAR ReadyNAS Surveillance versions 1.1.1 through 1.4.1 allows remote attackers to execute arbitrary PHP code via the log parameter.