Evil-DB LogoEvil-DB
← All CVEs

CVE-2016-5674

critical · 9.8

A public exploit / detection template exists

Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →

__debugging_center_utils___.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execute arbitrary PHP code via the log parameter.

9.8
CVSS
94.6%
EPSS (exploit prob.)
100th
EPSS percentile
2016-08-31
Published

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-20

Affected products

VendorProductAffected versions
netgearreadynas_surveillance1.1.1
netgearreadynas_surveillance1.1.2
netgearreadynas_surveillance1.2.0.4
netgearreadynas_surveillance1.3.2.4
netgearreadynas_surveillance1.3.2.14
netgearreadynas_surveillance1.4.0
netgearreadynas_surveillance1.4.1
netgearreadynas_surveillance1.4.2
nuuonvrmini_21.7.5
nuuonvrmini_21.7.6
nuuonvrmini_22.0.0
nuuonvrmini_22.2.1
nuuonvrmini_23.0.0
nuuonvrsolo1.75
nuuonvrsolo2.0.0
nuuonvrsolo2.0.1
nuuonvrsolo2.1.5
nuuonvrsolo2.2.2
nuuonvrsolo2.3
nuuonvrsolo2.3.1.20
nuuonvrsolo2.3.7.9
nuuonvrsolo2.3.7.10
nuuonvrsolo2.3.9.6
nuuonvrsolo3.0.0

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2016-5674