CVE-2016-5674

Published: Aug 31, 2016Modified: May 6, 2026

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

__debugging_center_utils___.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execute arbitrary PHP code via the log parameter.

Affected (24)

Products: Netgear: Readynas Surveillance · Nuuo: Nvrmini 2, Nvrsolo

Netgear

1 product

Readynas Surveillance

Nuuo

2 products

Nvrmini 2

Nvrsolo

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Netgear Readynas Surveillance	Version 1.1.1
Netgear Readynas Surveillance	Version 1.1.2
Netgear Readynas Surveillance	Version 1.2.0.4
Netgear Readynas Surveillance	Version 1.3.2.14
Netgear Readynas Surveillance	Version 1.3.2.4
Netgear Readynas Surveillance	Version 1.4.0
Netgear Readynas Surveillance	Version 1.4.1
Netgear Readynas Surveillance	Version 1.4.2

Configuration B

5 vulnerable

Vulnerable Software	Affected Versions
Nuuo Nvrmini 2	Version 1.7.5
Nuuo Nvrmini 2	Version 1.7.6
Nuuo Nvrmini 2	Version 2.0.0
Nuuo Nvrmini 2	Version 2.2.1
Nuuo Nvrmini 2	Version 3.0.0

Configuration C

11 vulnerable

Vulnerable Software	Affected Versions
Nuuo Nvrsolo	Version 1.75
Nuuo Nvrsolo	Version 2.0.0
Nuuo Nvrsolo	Version 2.0.1
Nuuo Nvrsolo	Version 2.1.5
Nuuo Nvrsolo	Version 2.2.2
Nuuo Nvrsolo	Version 2.3.1.20
Nuuo Nvrsolo	Version 2.3.7.10
Nuuo Nvrsolo	Version 2.3.7.9
Nuuo Nvrsolo	Version 2.3.9.6
Nuuo Nvrsolo	Version 2.3
Nuuo Nvrsolo	Version 3.0.0