CVE-2016-5675

Published: Aug 31, 2016Modified: May 6, 2026

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 through 3.2.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execute arbitrary PHP code via the NTPServer parameter.

Affected (36)

Products: Netgear: Readynas Surveillance · Nuuo: Crystal, Nvrsolo, Nvrmini 2

Netgear

1 product

Readynas Surveillance

3 products

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Netgear Readynas Surveillance	Version 1.1.1
Netgear Readynas Surveillance	Version 1.1.2
Netgear Readynas Surveillance	Version 1.2.0.4
Netgear Readynas Surveillance	Version 1.3.2.14
Netgear Readynas Surveillance	Version 1.3.2.4
Netgear Readynas Surveillance	Version 1.4.0
Netgear Readynas Surveillance	Version 1.4.1
Netgear Readynas Surveillance	Version 1.4.2

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Nuuo Crystal	Version 2.2.1
Nuuo Crystal	Version 3.0.0
Nuuo Crystal	Version 3.1.0
Nuuo Crystal	Version 3.2.0

Configuration C

19 vulnerable

Vulnerable Software	Affected Versions
Nuuo Nvrsolo	Version 1.0.0
Nuuo Nvrsolo	Version 1.0.1
Nuuo Nvrsolo	Version 1.1.0.117
Nuuo Nvrsolo	Version 1.1.0
Nuuo Nvrsolo	Version 1.1.1
Nuuo Nvrsolo	Version 1.1.2
Nuuo Nvrsolo	Version 1.2.0
Nuuo Nvrsolo	Version 1.3.0
Nuuo Nvrsolo	Version 1.75
Nuuo Nvrsolo	Version 2.0.0
Nuuo Nvrsolo	Version 2.0.1
Nuuo Nvrsolo	Version 2.1.5
Nuuo Nvrsolo	Version 2.2.2
Nuuo Nvrsolo	Version 2.3.1.20
Nuuo Nvrsolo	Version 2.3.7.10
Nuuo Nvrsolo	Version 2.3.7.9
Nuuo Nvrsolo	Version 2.3.9.6
Nuuo Nvrsolo	Version 2.3
Nuuo Nvrsolo	Version 3.0.0