Vulnerability Description
cgi-bin/cgi_system in NUUO NVRmini 2 1.7.5 through 2.x, NUUO NVRsolo 1.7.5 through 2.x, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to reset the administrator password via a cmd=loaddefconfig action.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Netgear | Readynas Surveillance | 1.1.1 |
| Nuuo | Nvrsolo | 1.75 |
| Nuuo | Nvrmini 2 | 1.7.5 |
Related Weaknesses (CWE)
References
- http://www.kb.cert.org/vuls/id/856152Third Party AdvisoryUS Government Resource
- http://www.securityfocus.com/bid/92318
- https://www.exploit-db.com/exploits/40200/
- http://www.kb.cert.org/vuls/id/856152Third Party AdvisoryUS Government Resource
- http://www.securityfocus.com/bid/92318
- https://www.exploit-db.com/exploits/40200/
FAQ
What is CVE-2016-5676?
CVE-2016-5676 is a vulnerability with a CVSS score of 7.5 (HIGH). cgi-bin/cgi_system in NUUO NVRmini 2 1.7.5 through 2.x, NUUO NVRsolo 1.7.5 through 2.x, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to reset the administrator passwor...
How severe is CVE-2016-5676?
CVE-2016-5676 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-5676?
Check the references section above for vendor advisories and patch information. Affected products include: Netgear Readynas Surveillance, Nuuo Nvrsolo, Nuuo Nvrmini 2.