Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

netgear readynas surveillance vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2016-5674
__debugging_center_utils___.php in NUUO NVRmini 2 1.7.5 up to and including 3.0.0, NUUO NVRsolo 1.7.5 up to and including 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 up to and including 1.4.1 allows remote malicious users to execute arbitrary PHP code via the log parameter.
Netgear Readynas Surveillance 1.4.2Netgear Readynas Surveillance 1.4.1Netgear Readynas Surveillance 1.1.1Netgear Readynas Surveillance 1.1.2Netgear Readynas Surveillance 1.3.2.14Netgear Readynas Surveillance 1.2.0.4Netgear Readynas Surveillance 1.3.2.4Netgear Readynas Surveillance 1.4.0Nuuo Nvrmini 2 3.0.0Nuuo Nvrmini 2 2.2.1Nuuo Nvrmini 2 2.0.0Nuuo Nvrmini 2 1.7.6Nuuo Nvrmini 2 1.7.5Nuuo Nvrsolo 2.3.9.6Nuuo Nvrsolo 2.3.7.10Nuuo Nvrsolo 2.0.0Nuuo Nvrsolo 1.75Nuuo Nvrsolo 3.0.0Nuuo Nvrsolo 2.1.5Nuuo Nvrsolo 2.0.1Nuuo Nvrsolo 2.3.7.9Nuuo Nvrsolo 2.3.1.20
10
CVSSv2
CVE-2016-5675
handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 up to and including 3.0.0, NUUO NVRsolo 1.0.0 up to and including 3.0.0, NUUO Crystal 2.2.1 up to and including 3.2.0, and NETGEAR ReadyNAS Surveillance 1.1.1 up to and including 1.4.1 allows remote malicious users to execute arbi...
Netgear Readynas Surveillance 1.4.1Netgear Readynas Surveillance 1.1.1Netgear Readynas Surveillance 1.3.2.4Netgear Readynas Surveillance 1.4.0Netgear Readynas Surveillance 1.4.2Netgear Readynas Surveillance 1.1.2Netgear Readynas Surveillance 1.3.2.14Netgear Readynas Surveillance 1.2.0.4Nuuo Crystal 2.2.1Nuuo Crystal 3.2.0Nuuo Crystal 3.1.0Nuuo Crystal 3.0.0Nuuo Nvrsolo 1.3.0Nuuo Nvrsolo 1.2.0Nuuo Nvrsolo 2.3.9.6Nuuo Nvrsolo 2.3.7.10Nuuo Nvrsolo 2.0.0Nuuo Nvrsolo 1.75Nuuo Nvrsolo 1.0.1Nuuo Nvrsolo 1.0.0Nuuo Nvrsolo 3.0.0Nuuo Nvrsolo 2.1.5
10
CVSSv2
CVE-2016-5678
NUUO NVRmini 2 1.0.0 up to and including 3.0.0 and NUUO NVRsolo 1.0.0 up to and including 3.0.0 have hardcoded root credentials, which allows remote malicious users to obtain administrative access via unspecified vectors.
Nuuo Nvrmini 2 1.6.2Nuuo Nvrmini 2 1.6.1Nuuo Nvrmini 2 1.1.0Nuuo Nvrmini 2 1.0.0Nuuo Nvrmini 2 3.0.0Nuuo Nvrmini 2 1.7.0Nuuo Nvrmini 2 1.6.4Nuuo Nvrmini 2 1.3.2Nuuo Nvrmini 2 1.3.0Nuuo Nvrmini 2 1.6.0Nuuo Nvrmini 2 1.5.2Nuuo Nvrmini 2 2.2.1Nuuo Nvrmini 2 2.0.0Nuuo Nvrmini 2 1.7.2Nuuo Nvrmini 2 1.7.1Nuuo Nvrmini 2 1.5.1Nuuo Nvrmini 2 1.4.0Nuuo Nvrmini 2 1.7.6Nuuo Nvrmini 2 1.7.5Nuuo Nvrsolo 1.2.0Nuuo Nvrsolo 1.1.2Nuuo Nvrsolo 2.3.9.6
9
CVSSv2
CVE-2016-11056
Certain NETGEAR devices are affected by anonymous root access. This affects ReadyNAS Surveillance 1.1.1-3-armel and previous versions and ReadyNAS Surveillance 1.4.1-3-amd64 and previous versions.
Netgear Readynas Surveillance
9
CVSSv2
CVE-2016-5679
cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 up to and including 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the sn parameter to the transfer_license command.
Nuuo Nvrmini 2 3.0.0Nuuo Nvrmini 2 2.2.1Nuuo Nvrmini 2 2.0.0Nuuo Nvrmini 2 1.7.6Netgear Readynas Surveillance 1.1.2
9
CVSSv2
CVE-2016-5680
Stack-based buffer overflow in cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 up to and including 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote authenticated users to execute arbitrary code via the sn parameter to the transfer_license command.
Nuuo Nvrmini 2 3.0.0Nuuo Nvrmini 2 2.2.1Nuuo Nvrmini 2 2.0.0Nuuo Nvrmini 2 1.7.6Netgear Readynas Surveillance 1.1.2
7.9
CVSSv2
CVE-2017-18861
Certain NETGEAR devices are affected by CSRF. This affects ReadyNAS Surveillance 1.4.3-15-x86 and previous versions and ReadyNAS Surveillance 1.1.4-5-ARM and previous versions.
Netgear Readynas Surveillance
7.5
CVSSv2
CVE-2017-18378
In NETGEAR ReadyNAS Surveillance prior to 1.4.3-17 x86 and prior to 1.1.4-7 ARM, $_GET['uploaddir'] is not escaped and is passed to system() through $tmp_upload_dir, leading to upgrade_handle.php?cmd=writeuploaddir remote command execution.
Netgear Readynas Surveillance Firmware
5
CVSSv2
CVE-2016-5676
cgi-bin/cgi_system in NUUO NVRmini 2 1.7.5 up to and including 2.x, NUUO NVRsolo 1.7.5 up to and including 2.x, and NETGEAR ReadyNAS Surveillance 1.1.1 up to and including 1.4.1 allows remote malicious users to reset the administrator password via a cmd=loaddefconfig action.
Netgear Readynas Surveillance 1.4.2Netgear Readynas Surveillance 1.4.0Netgear Readynas Surveillance 1.4.1Netgear Readynas Surveillance 1.1.1Netgear Readynas Surveillance 1.1.2Netgear Readynas Surveillance 1.3.2.14Netgear Readynas Surveillance 1.2.0.4Netgear Readynas Surveillance 1.3.2.4Nuuo Nvrsolo 3.0.0Nuuo Nvrsolo 2.1.5Nuuo Nvrsolo 2.0.1Nuuo Nvrsolo 2.3Nuuo Nvrsolo 2.2.2Nuuo Nvrsolo 2.3.9.6Nuuo Nvrsolo 2.3.7.10Nuuo Nvrsolo 2.0.0Nuuo Nvrsolo 1.75Nuuo Nvrsolo 2.3.7.9Nuuo Nvrsolo 2.3.1.20Nuuo Nvrmini 2 1.7.6Nuuo Nvrmini 2 1.7.5Nuuo Nvrmini 2 2.2.1
5
CVSSv2
CVE-2016-5677
NUUO NVRmini 2 1.7.5 up to and including 3.0.0, NUUO NVRsolo 1.0.0 up to and including 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 up to and including 1.4.1 have a hardcoded qwe23622260 password for the nuuoeng account, which allows remote malicious users to obtain sensitive i...
Netgear Readynas Surveillance 1.4.1Netgear Readynas Surveillance 1.1.1Netgear Readynas Surveillance 1.3.2.4Netgear Readynas Surveillance 1.4.0Netgear Readynas Surveillance 1.4.2Netgear Readynas Surveillance 1.1.2Netgear Readynas Surveillance 1.3.2.14Netgear Readynas Surveillance 1.2.0.4Nuuo Nvrmini 2 1.7.6Nuuo Nvrmini 2 1.7.5Nuuo Nvrmini 2 3.0.0Nuuo Nvrmini 2 2.2.1Nuuo Nvrmini 2 2.0.0Nuuo Nvrsolo 1.3.0Nuuo Nvrsolo 1.0.0Nuuo Nvrsolo 3.0.0Nuuo Nvrsolo 2.0.1Nuuo Nvrsolo 2.0.0Nuuo Nvrsolo 1.1.0.117Nuuo Nvrsolo 1.0.1Nuuo Nvrsolo 2.2.2Nuuo Nvrsolo 2.1.5
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-29895blind SQL injectionCVE-2024-5064CVE-2023-52677CVE-2023-52682CVE-2024-30051CVE-2024-35849remote attackersremote
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook