Critical severity · published Aug 31, 2016
CVE-2016-5675
handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 through 3.2.0, and NETGEAR ReadyNAS Surveillance 1.1.1…
9.8
CVSS
70.9%
EPSS
No
On KEV
Description
handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 through 3.2.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execute arbitrary PHP code via the NTPServer parameter.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)70.9% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CR
Crystal · Nuuo
2.2.1; 3.0.0; 3.1.0; 3.2.0 · source: NVD
N2
Nvrmini 2 · Nuuo
1.7.5; 1.7.6; 2.0.0; 2.2.1; 3.0.0 · source: NVD
NV
Nvrsolo · Nuuo
1.0.0; 1.0.1; 1.1.0; 1.1.0.117; 1.1.1; 1.1.2; +13 more · source: NVD
RS
Readynas Surveillance · Netgear
1.1.1; 1.1.2; 1.2.0.4; 1.3.2.4; 1.3.2.14; 1.4.0; +2 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-5675
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-5675
Third Party Advisory
http://www.kb.cert.org/vuls/id/856152
www.securityfocus.com
http://www.securityfocus.com/bid/92318
www.exploit-db.com
https://www.exploit-db.com/exploits/40200/
More from Readynas Surveillance
9.8
CVE-2016-5674
__debugging_center_utils___.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote…
8.8
CVE-2016-11056
Certain NETGEAR devices are affected by anonymous root access
8.8
CVE-2016-5680
Stack-based buffer overflow in cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote authenticated users to execute…
8.8
CVE-2016-5679
cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote authenticated users to execute arbitrary commands via shell…
8.0
CVE-2017-18861
Certain NETGEAR devices are affected by CSRF