NUUO NVRmini 2, NUUO NVRsolo, NETGEAR ReadyNAS Surveillance vulnerabilities
3 known CVE vulnerabilities in NUUO NVRmini 2, NUUO NVRsolo, NETGEAR ReadyNAS Surveillance, translated and rated.
- CVE-2016-5677High
NUUO NVRmini 2 versions 1.7.5 through 3.0.0, NUUO NVRsolo versions 1.0.0 through 3.0.0, and NETGEAR ReadyNAS Surveillance versions 1.1.1 through 1.4.1 have a hardcoded password qwe23622260 for the nuuoeng account, allowing remote attackers to obtain sensitive information via an __nvr_status___.php request.
- CVE-2016-5676High
In NUUO NVRmini 2 versions 1.7.5 through 2.x, NUUO NVRsolo versions 1.7.5 through 2.x, and NETGEAR ReadyNAS Surveillance versions 1.1.1 through 1.4.1, a vulnerability allows remote attackers to reset the administrator password via a cmd=loaddefconfig action.
- CVE-2016-5674Critical
__debugging_center_utils___.php in NUUO NVRmini 2 versions 1.7.5 through 3.0.0, NUUO NVRsolo versions 1.7.5 through 3.0.0, and NETGEAR ReadyNAS Surveillance versions 1.1.1 through 1.4.1 allows remote attackers to execute arbitrary PHP code via the log parameter.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS