CVE-2016-5676
high · 7.5cgi-bin/cgi_system in NUUO NVRmini 2 1.7.5 through 2.x, NUUO NVRsolo 1.7.5 through 2.x, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to reset the administrator password via a cmd=loaddefconfig action.
7.5
CVSS
53.7%
EPSS (exploit prob.)
99th
EPSS percentile
2016-08-31
Published
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-285
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| netgear | readynas_surveillance | 1.1.1 |
| netgear | readynas_surveillance | 1.1.2 |
| netgear | readynas_surveillance | 1.2.0.4 |
| netgear | readynas_surveillance | 1.3.2.4 |
| netgear | readynas_surveillance | 1.3.2.14 |
| netgear | readynas_surveillance | 1.4.0 |
| netgear | readynas_surveillance | 1.4.1 |
| netgear | readynas_surveillance | 1.4.2 |
| nuuo | nvrsolo | 1.75 |
| nuuo | nvrsolo | 2.0.0 |
| nuuo | nvrsolo | 2.0.1 |
| nuuo | nvrsolo | 2.1.5 |
| nuuo | nvrsolo | 2.2.2 |
| nuuo | nvrsolo | 2.3 |
| nuuo | nvrsolo | 2.3.1.20 |
| nuuo | nvrsolo | 2.3.7.9 |
| nuuo | nvrsolo | 2.3.7.10 |
| nuuo | nvrsolo | 2.3.9.6 |
| nuuo | nvrsolo | 3.0.0 |
| nuuo | nvrmini_2 | 1.7.5 |
| nuuo | nvrmini_2 | 1.7.6 |
| nuuo | nvrmini_2 | 2.0.0 |
| nuuo | nvrmini_2 | 2.2.1 |
| nuuo | nvrmini_2 | 3.0.0 |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2016-5676