Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2016-5674

__debugging_center_utils___.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execute arbitrary PHP code via the log parameter.

Published

2016-08-31T15:59:00.153

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-20
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application netgear readynas_surveillance 1.1.1 Yes
Application netgear readynas_surveillance 1.1.2 Yes
Application netgear readynas_surveillance 1.2.0.4 Yes
Application netgear readynas_surveillance 1.3.2.4 Yes
Application netgear readynas_surveillance 1.3.2.14 Yes
Application netgear readynas_surveillance 1.4.0 Yes
Application netgear readynas_surveillance 1.4.1 Yes
Application netgear readynas_surveillance 1.4.2 Yes
Operating System nuuo nvrmini_2 1.7.5 Yes
Operating System nuuo nvrmini_2 1.7.6 Yes
Operating System nuuo nvrmini_2 2.0.0 Yes
Operating System nuuo nvrmini_2 2.2.1 Yes
Operating System nuuo nvrmini_2 3.0.0 Yes
Operating System nuuo nvrsolo 1.75 Yes
Operating System nuuo nvrsolo 2.0.0 Yes
Operating System nuuo nvrsolo 2.0.1 Yes
Operating System nuuo nvrsolo 2.1.5 Yes
Operating System nuuo nvrsolo 2.2.2 Yes
Operating System nuuo nvrsolo 2.3 Yes
Operating System nuuo nvrsolo 2.3.1.20 Yes
Operating System nuuo nvrsolo 2.3.7.9 Yes
Operating System nuuo nvrsolo 2.3.7.10 Yes
Operating System nuuo nvrsolo 2.3.9.6 Yes
Operating System nuuo nvrsolo 3.0.0 Yes
References