Skip to content

CVE-2016-5678 NUUO NVRmini 2 1.0.0 through 3.0.0 and NUUO NVRsolo 1.0.0 through 3.0.0 have hardcoded root credentials, which allows remote attackers to obtain administrative access via unspecified vectors.

CriticalCVSS 9.8 EPSS 8.7%
Published
Updated
Exploit status
No public exploit known

Description

NUUO NVRmini 2 1.0.0 through 3.0.0 and NUUO NVRsolo 1.0.0 through 3.0.0 have hardcoded root credentials, which allows remote attackers to obtain administrative access via unspecified vectors.

Affected products

ProductAffected versionsFixed in
nuuo nvrmini 2 = 1.0.0 No fix listed
nuuo nvrmini 2 = 1.1.0 No fix listed
nuuo nvrmini 2 = 1.3.0 No fix listed
nuuo nvrmini 2 = 1.3.2 No fix listed
nuuo nvrmini 2 = 1.4.0 No fix listed
nuuo nvrmini 2 = 1.5.1 No fix listed
nuuo nvrmini 2 = 1.5.2 No fix listed
nuuo nvrmini 2 = 1.6.0 No fix listed
nuuo nvrmini 2 = 1.6.1 No fix listed
nuuo nvrmini 2 = 1.6.2 No fix listed
nuuo nvrmini 2 = 1.6.4 No fix listed
nuuo nvrmini 2 = 1.7.0 No fix listed
nuuo nvrmini 2 = 1.7.1 No fix listed
nuuo nvrmini 2 = 1.7.2 No fix listed
nuuo nvrmini 2 = 1.7.5 No fix listed
nuuo nvrmini 2 = 1.7.6 No fix listed
nuuo nvrmini 2 = 2.0.0 No fix listed
nuuo nvrmini 2 = 2.2.1 No fix listed
nuuo nvrmini 2 = 3.0.0 No fix listed
nuuo nvrsolo = 1.0.0 No fix listed
nuuo nvrsolo = 1.0.1 No fix listed
nuuo nvrsolo = 1.1.0 No fix listed
nuuo nvrsolo = 1.1.0.117 No fix listed
nuuo nvrsolo = 1.1.1 No fix listed
nuuo nvrsolo = 1.1.2 No fix listed
Show 13 more
ProductAffected versionsFixed in
nuuo nvrsolo = 1.2.0 No fix listed
nuuo nvrsolo = 1.3.0 No fix listed
nuuo nvrsolo = 1.75 No fix listed
nuuo nvrsolo = 2.0.0 No fix listed
nuuo nvrsolo = 2.0.1 No fix listed
nuuo nvrsolo = 2.1.5 No fix listed
nuuo nvrsolo = 2.2.2 No fix listed
nuuo nvrsolo = 2.3 No fix listed
nuuo nvrsolo = 2.3.1.20 No fix listed
nuuo nvrsolo = 2.3.7.9 No fix listed
nuuo nvrsolo = 2.3.7.10 No fix listed
nuuo nvrsolo = 2.3.9.6 No fix listed
nuuo nvrsolo = 3.0.0 No fix listed

References