PT-2016-6634 · Nuuo · Nuuo Nvrmini 2+1

Pedro Ribeiro · Publicado 2016-08-31 · Atualizado 2017-09-03 · CVE-2016-5678

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NUUO NVRmini 2 versions 1.0.0 through 3.0.0 NUUO NVRsolo versions 1.0.0 through 3.0.0

Description The issue allows remote attackers to obtain administrative access due to hardcoded root credentials.

Recommendations For NUUO NVRmini 2 versions 1.0.0 through 3.0.0, change the hardcoded root credentials to secure ones. For NUUO NVRsolo versions 1.0.0 through 3.0.0, change the hardcoded root credentials to secure ones.

Exploit

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2016-5678

Produtos afetados

Nuuo Nvrmini 2

Nuuo Nvrsolo

Referências · 5

• 🔥 https://exploit-db.com/exploits/40200 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2016-5678 · Nota de Segurança
• http://kb.cert.org/vuls/id/856152 · Nota
• http://securityfocus.com/bid/92318 · Nota
• https://osv.dev/vulnerability/CVE-2016-5678 · Aviso do Fabricante