CVE-2016-5675

handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 through 3.2.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execute arbitrary PHP code via the NTPServer parameter.

CVSS v3.0

9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

70.88% chance of exploitation in the next 30 days, 99th percentile

Published

2016-08-31

Updated

2024-08-06

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/nuuo_nvrmini_auth_rce…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/40200

References

• CVE Record
• NVD entry

Related

• CVE-2016-5674
• CVE-2016-5676
• CVE-2016-5649
• CVE-2016-5677
• CVE-2016-5648
• CVE-2016-5678