CVE-2016-5676

Published: Aug 31, 2016Modified: May 6, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

cgi-bin/cgi_system in NUUO NVRmini 2 1.7.5 through 2.x, NUUO NVRsolo 1.7.5 through 2.x, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to reset the administrator password via a cmd=loaddefconfig action.

Affected (24)

Products: Netgear: Readynas Surveillance · Nuuo: Nvrsolo, Nvrmini 2

Netgear

1 product

Readynas Surveillance

Nuuo

2 products

Nvrsolo

Nvrmini 2

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Netgear Readynas Surveillance	Version 1.1.1
Netgear Readynas Surveillance	Version 1.1.2
Netgear Readynas Surveillance	Version 1.2.0.4
Netgear Readynas Surveillance	Version 1.3.2.14
Netgear Readynas Surveillance	Version 1.3.2.4
Netgear Readynas Surveillance	Version 1.4.0
Netgear Readynas Surveillance	Version 1.4.1
Netgear Readynas Surveillance	Version 1.4.2

Configuration B

11 vulnerable

Vulnerable Software	Affected Versions
Nuuo Nvrsolo	Version 1.75
Nuuo Nvrsolo	Version 2.0.0
Nuuo Nvrsolo	Version 2.0.1
Nuuo Nvrsolo	Version 2.1.5
Nuuo Nvrsolo	Version 2.2.2
Nuuo Nvrsolo	Version 2.3.1.20
Nuuo Nvrsolo	Version 2.3.7.10
Nuuo Nvrsolo	Version 2.3.7.9
Nuuo Nvrsolo	Version 2.3.9.6
Nuuo Nvrsolo	Version 2.3
Nuuo Nvrsolo	Version 3.0.0