Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

netgear readynas surveillance firmware vulnerabilities and exploits

(subscribe to this query)
1000
VMScore
CVE-2016-5675
handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 up to and including 3.0.0, NUUO NVRsolo 1.0.0 up to and including 3.0.0, NUUO Crystal 2.2.1 up to and including 3.2.0, and NETGEAR ReadyNAS Surveillance 1.1.1 up to and including 1.4.1 allows remote malicious users to execute arbi...
Netgear Readynas Surveillance 1.4.0Netgear Readynas Surveillance 1.1.1Netgear Readynas Surveillance 1.2.0.4Netgear Readynas Surveillance 1.4.2Netgear Readynas Surveillance 1.3.2.14Netgear Readynas Surveillance 1.4.1Netgear Readynas Surveillance 1.3.2.4Netgear Readynas Surveillance 1.1.2Nuuo Crystal 2.2.1Nuuo Crystal 3.2.0Nuuo Crystal 3.1.0Nuuo Crystal 3.0.0Nuuo Nvrsolo 2.0.0Nuuo Nvrsolo 1.3.0Nuuo Nvrsolo 1.1.0.117Nuuo Nvrsolo 2.3.1.20Nuuo Nvrsolo 3.0.0Nuuo Nvrsolo 1.0.0Nuuo Nvrsolo 2.3.7.9Nuuo Nvrsolo 2.3Nuuo Nvrsolo 2.3.7.10Nuuo Nvrsolo 2.3.9.6
1000
VMScore
CVE-2016-5678
NUUO NVRmini 2 1.0.0 up to and including 3.0.0 and NUUO NVRsolo 1.0.0 up to and including 3.0.0 have hardcoded root credentials, which allows remote malicious users to obtain administrative access via unspecified vectors.
Nuuo Nvrmini 2 1.5.2Nuuo Nvrmini 2 1.3.0Nuuo Nvrmini 2 1.0.0Nuuo Nvrmini 2 2.0.0Nuuo Nvrmini 2 1.6.4Nuuo Nvrmini 2 1.3.2Nuuo Nvrmini 2 1.7.0Nuuo Nvrmini 2 1.1.0Nuuo Nvrmini 2 1.7.5Nuuo Nvrmini 2 1.6.1Nuuo Nvrmini 2 1.7.1Nuuo Nvrmini 2 1.7.6Nuuo Nvrmini 2 1.6.2Nuuo Nvrmini 2 2.2.1Nuuo Nvrmini 2 1.6.0Nuuo Nvrmini 2 1.7.2Nuuo Nvrmini 2 1.4.0Nuuo Nvrmini 2 3.0.0Nuuo Nvrmini 2 1.5.1Nuuo Nvrsolo 2.0.0Nuuo Nvrsolo 1.3.0Nuuo Nvrsolo 1.1.0.117
1000
VMScore
CVE-2016-5674
__debugging_center_utils___.php in NUUO NVRmini 2 1.7.5 up to and including 3.0.0, NUUO NVRsolo 1.7.5 up to and including 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 up to and including 1.4.1 allows remote malicious users to execute arbitrary PHP code via the log parameter.
Netgear Readynas Surveillance 1.4.0Netgear Readynas Surveillance 1.1.1Netgear Readynas Surveillance 1.2.0.4Netgear Readynas Surveillance 1.4.2Netgear Readynas Surveillance 1.3.2.14Netgear Readynas Surveillance 1.4.1Netgear Readynas Surveillance 1.3.2.4Netgear Readynas Surveillance 1.1.2Nuuo Nvrmini 2 2.0.0Nuuo Nvrmini 2 1.7.5Nuuo Nvrmini 2 1.7.6Nuuo Nvrmini 2 2.2.1Nuuo Nvrmini 2 3.0.0Nuuo Nvrsolo 2.0.0Nuuo Nvrsolo 2.3.1.20Nuuo Nvrsolo 3.0.0Nuuo Nvrsolo 2.3.7.9Nuuo Nvrsolo 2.3Nuuo Nvrsolo 2.3.7.10Nuuo Nvrsolo 2.3.9.6Nuuo Nvrsolo 2.0.1Nuuo Nvrsolo 2.2.2
905
VMScore
CVE-2016-5679
cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 up to and including 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the sn parameter to the transfer_license command.
Nuuo Nvrmini 2 2.0.0Nuuo Nvrmini 2 1.7.6Nuuo Nvrmini 2 2.2.1Nuuo Nvrmini 2 3.0.0Netgear Readynas Surveillance 1.1.2
905
VMScore
CVE-2016-5680
Stack-based buffer overflow in cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 up to and including 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote authenticated users to execute arbitrary code via the sn parameter to the transfer_license command.
Nuuo Nvrmini 2 2.0.0Nuuo Nvrmini 2 1.7.6Nuuo Nvrmini 2 2.2.1Nuuo Nvrmini 2 3.0.0Netgear Readynas Surveillance 1.1.2
668
VMScore
CVE-2017-18378
In NETGEAR ReadyNAS Surveillance prior to 1.4.3-17 x86 and prior to 1.1.4-7 ARM, $_GET['uploaddir'] is not escaped and is passed to system() through $tmp_upload_dir, leading to upgrade_handle.php?cmd=writeuploaddir remote command execution.
Netgear Readynas Surveillance Firmware
505
VMScore
CVE-2016-5676
cgi-bin/cgi_system in NUUO NVRmini 2 1.7.5 up to and including 2.x, NUUO NVRsolo 1.7.5 up to and including 2.x, and NETGEAR ReadyNAS Surveillance 1.1.1 up to and including 1.4.1 allows remote malicious users to reset the administrator password via a cmd=loaddefconfig action.
Netgear Readynas Surveillance 1.4.0Netgear Readynas Surveillance 1.1.1Netgear Readynas Surveillance 1.2.0.4Netgear Readynas Surveillance 1.4.2Netgear Readynas Surveillance 1.3.2.14Netgear Readynas Surveillance 1.4.1Netgear Readynas Surveillance 1.3.2.4Netgear Readynas Surveillance 1.1.2Nuuo Nvrsolo 2.0.0Nuuo Nvrsolo 2.3.1.20Nuuo Nvrsolo 3.0.0Nuuo Nvrsolo 2.3.7.9Nuuo Nvrsolo 2.3Nuuo Nvrsolo 2.3.7.10Nuuo Nvrsolo 2.3.9.6Nuuo Nvrsolo 2.0.1Nuuo Nvrsolo 2.2.2Nuuo Nvrsolo 2.1.5Nuuo Nvrsolo 1.75Nuuo Nvrmini 2 2.0.0Nuuo Nvrmini 2 1.7.5Nuuo Nvrmini 2 1.7.6
505
VMScore
CVE-2016-5677
NUUO NVRmini 2 1.7.5 up to and including 3.0.0, NUUO NVRsolo 1.0.0 up to and including 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 up to and including 1.4.1 have a hardcoded qwe23622260 password for the nuuoeng account, which allows remote malicious users to obtain sensitive i...
Netgear Readynas Surveillance 1.4.0Netgear Readynas Surveillance 1.1.1Netgear Readynas Surveillance 1.2.0.4Netgear Readynas Surveillance 1.4.2Netgear Readynas Surveillance 1.3.2.14Netgear Readynas Surveillance 1.4.1Netgear Readynas Surveillance 1.3.2.4Netgear Readynas Surveillance 1.1.2Nuuo Nvrmini 2 2.0.0Nuuo Nvrmini 2 1.7.5Nuuo Nvrmini 2 1.7.6Nuuo Nvrmini 2 2.2.1Nuuo Nvrmini 2 3.0.0Nuuo Nvrsolo 2.0.0Nuuo Nvrsolo 1.3.0Nuuo Nvrsolo 1.1.0.117Nuuo Nvrsolo 2.3.1.20Nuuo Nvrsolo 3.0.0Nuuo Nvrsolo 1.0.0Nuuo Nvrsolo 2.3.7.9Nuuo Nvrsolo 2.3Nuuo Nvrsolo 2.3.7.10
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27802template injectionCVE-2024-0044code injectionCVE-2024-35474CVE-2024-27857CVE-2024-23251CVE-2024-23692physical
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook