CVE-2016-5677

Published: Aug 31, 2016Modified: May 6, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 have a hardcoded qwe23622260 password for the nuuoeng account, which allows remote attackers to obtain sensitive information via an __nvr_status___.php request.

Affected (32)

Products: Netgear: Readynas Surveillance · Nuuo: Nvrmini 2, Nvrsolo

Netgear

1 product

Readynas Surveillance

Nuuo

2 products

Nvrmini 2

Nvrsolo

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Netgear Readynas Surveillance	Version 1.1.1
Netgear Readynas Surveillance	Version 1.1.2
Netgear Readynas Surveillance	Version 1.2.0.4
Netgear Readynas Surveillance	Version 1.3.2.14
Netgear Readynas Surveillance	Version 1.3.2.4
Netgear Readynas Surveillance	Version 1.4.0
Netgear Readynas Surveillance	Version 1.4.1
Netgear Readynas Surveillance	Version 1.4.2

Configuration B

5 vulnerable

Vulnerable Software	Affected Versions
Nuuo Nvrmini 2	Version 1.7.5
Nuuo Nvrmini 2	Version 1.7.6
Nuuo Nvrmini 2	Version 2.0.0
Nuuo Nvrmini 2	Version 2.2.1
Nuuo Nvrmini 2	Version 3.0.0

Configuration C

19 vulnerable

Vulnerable Software	Affected Versions
Nuuo Nvrsolo	Version 1.0.0
Nuuo Nvrsolo	Version 1.0.1
Nuuo Nvrsolo	Version 1.1.0.117
Nuuo Nvrsolo	Version 1.1.0
Nuuo Nvrsolo	Version 1.1.1
Nuuo Nvrsolo	Version 1.1.2
Nuuo Nvrsolo	Version 1.2.0
Nuuo Nvrsolo	Version 1.3.0
Nuuo Nvrsolo	Version 1.75
Nuuo Nvrsolo	Version 2.0.0
Nuuo Nvrsolo	Version 2.0.1
Nuuo Nvrsolo	Version 2.1.5
Nuuo Nvrsolo	Version 2.2.2
Nuuo Nvrsolo	Version 2.3.1.20
Nuuo Nvrsolo	Version 2.3.7.10
Nuuo Nvrsolo	Version 2.3.7.9
Nuuo Nvrsolo	Version 2.3.9.6
Nuuo Nvrsolo	Version 2.3
Nuuo Nvrsolo	Version 3.0.0