CVE-2016-5675 handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 through 3.2.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote...
CriticalCVSS 9.8
EPSS 70.9%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 through 3.2.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execute arbitrary PHP code via the NTPServer parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netgear readynas surveillance | = 1.1.1 | No fix listed |
| netgear readynas surveillance | = 1.1.2 | No fix listed |
| netgear readynas surveillance | = 1.2.0.4 | No fix listed |
| netgear readynas surveillance | = 1.3.2.4 | No fix listed |
| netgear readynas surveillance | = 1.3.2.14 | No fix listed |
| netgear readynas surveillance | = 1.4.0 | No fix listed |
| netgear readynas surveillance | = 1.4.1 | No fix listed |
| netgear readynas surveillance | = 1.4.2 | No fix listed |
| nuuo crystal | = 2.2.1 | No fix listed |
| nuuo crystal | = 3.0.0 | No fix listed |
| nuuo crystal | = 3.1.0 | No fix listed |
| nuuo crystal | = 3.2.0 | No fix listed |
| nuuo nvrsolo | = 1.0.0 | No fix listed |
| nuuo nvrsolo | = 1.0.1 | No fix listed |
| nuuo nvrsolo | = 1.1.0 | No fix listed |
| nuuo nvrsolo | = 1.1.0.117 | No fix listed |
| nuuo nvrsolo | = 1.1.1 | No fix listed |
| nuuo nvrsolo | = 1.1.2 | No fix listed |
| nuuo nvrsolo | = 1.2.0 | No fix listed |
| nuuo nvrsolo | = 1.3.0 | No fix listed |
| nuuo nvrsolo | = 1.75 | No fix listed |
| nuuo nvrsolo | = 2.0.0 | No fix listed |
| nuuo nvrsolo | = 2.0.1 | No fix listed |
| nuuo nvrsolo | = 2.1.5 | No fix listed |
| nuuo nvrsolo | = 2.2.2 | No fix listed |
Show 11 more
| Product | Affected versions | Fixed in |
|---|---|---|
| nuuo nvrsolo | = 2.3 | No fix listed |
| nuuo nvrsolo | = 2.3.1.20 | No fix listed |
| nuuo nvrsolo | = 2.3.7.9 | No fix listed |
| nuuo nvrsolo | = 2.3.7.10 | No fix listed |
| nuuo nvrsolo | = 2.3.9.6 | No fix listed |
| nuuo nvrsolo | = 3.0.0 | No fix listed |
| nuuo nvrmini 2 | = 1.7.5 | No fix listed |
| nuuo nvrmini 2 | = 1.7.6 | No fix listed |
| nuuo nvrmini 2 | = 2.0.0 | No fix listed |
| nuuo nvrmini 2 | = 2.2.1 | No fix listed |
| nuuo nvrmini 2 | = 3.0.0 | No fix listed |