CVE-2016-5674

__debugging_center_utils___.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execute arbitrary PHP code via the log parameter.

CVSS v3.0 NVD

9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

94.61% chance of exploitation in the next 30 days, 100th percentile

Nuclei

critical · CWE-20

Published

2016-08-31

Updated

2024-08-06

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-5674.yaml

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/nuuo_nvrmini_unauth_r…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/40200

Exploit collections (1)

• CVE-2016-5674.yamlzan8in/afrog

Security advisories

• http://www.kb.cert.org/vuls/id/856152
• http://www.securityfocus.com/bid/92318

References

• CVE Record
• NVD entry