PT-2016-6634 · Nuuo · Nuuo Nvrmini 2+1

Pedro Ribeiro · Published 2016-08-31 · Updated 2017-09-03 · CVE-2016-5678

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NUUO NVRmini 2 versions 1.0.0 through 3.0.0 NUUO NVRsolo versions 1.0.0 through 3.0.0

Description The issue allows remote attackers to obtain administrative access due to hardcoded root credentials.

Recommendations For NUUO NVRmini 2 versions 1.0.0 through 3.0.0, change the hardcoded root credentials to secure ones. For NUUO NVRsolo versions 1.0.0 through 3.0.0, change the hardcoded root credentials to secure ones.

Exploit

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2016-5678

Affected Products

Nuuo Nvrmini 2

Nuuo Nvrsolo

References · 5

• 🔥 https://exploit-db.com/exploits/40200 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2016-5678 · Security Note
• https://osv.dev/vulnerability/CVE-2016-5678 · Vendor Advisory
• http://kb.cert.org/vuls/id/856152 · Note
• http://securityfocus.com/bid/92318 · Note