PT-2016-6633 · NetGear+1 · Netgear Readynas Surveillance+2

Pedro Ribeiro · Published 2016-08-31 · Updated 2017-09-03 · CVE-2016-5677

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions NUUO NVRmini 2 versions 1.7.5 through 3.0.0 NUUO NVRsolo versions 1.0.0 through 3.0.0 NETGEAR ReadyNAS Surveillance versions 1.1.1 through 1.4.1

Description The issue allows remote attackers to obtain sensitive information due to a hardcoded password for the nuuoeng account. This can be exploited via an nvr status .php request.

Recommendations For NUUO NVRmini 2 versions 1.7.5 through 3.0.0, consider changing the hardcoded password for the nuuoeng account. For NUUO NVRsolo versions 1.0.0 through 3.0.0, consider changing the hardcoded password for the nuuoeng account. For NETGEAR ReadyNAS Surveillance versions 1.1.1 through 1.4.1, consider changing the hardcoded password for the nuuoeng account. As a temporary workaround, consider restricting access to the nvr status .php endpoint until a patch is available.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2016-5677

Affected Products

Netgear Readynas Surveillance

Nuuo Nvrmini 2

Nuuo Nvrsolo

References · 5

• 🔥 https://exploit-db.com/exploits/40200 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2016-5677 · Security Note
• https://osv.dev/vulnerability/CVE-2016-5677 · Vendor Advisory
• http://kb.cert.org/vuls/id/856152 · Note
• http://securityfocus.com/bid/92318 · Note