CVE-2016-5674

🗓️ 31 Aug 2016 15:00:00Reported by certccType

cve

cve🔗 web.nvd.nist.gov👁 201 Views🌐 WEB

CVE-2016-5674 allows remote attackers to execute arbitrary PHP code via the log parameter

Reporter	Title	Published	Views	Family All 23
0day.today	NUUO NVRmini2 / NVRsolo / Crystal Devices / Netgear ReadyNAS Surveillance Application - Multiple Vul	5 Aug 201600:00	–	zdt
ATTACKERKB	CVE-2016-5674	31 Aug 201600:00	–	attackerkb
Circl	CVE-2016-5674	29 May 201815:50	–	circl
CNVD	Elevation of Privilege Vulnerability in Multiple NUUO and NetGear Products	14 Aug 201600:00	–	cnvd
Check Point Advisories	Nuuo NVR Log Parameter Unauthenticated Remote Code Execution (CVE-2016-5674)	6 Oct 201600:00	–	checkpoint_advisories
Cvelist	CVE-2016-5674	31 Aug 201615:00	–	cvelist
Exploit DB	NUUO NVRmini2 / NVRsolo / Crystal Devices / NETGEAR ReadyNAS Surveillance Application - Multiple Vulnerabilities	5 Aug 201600:00	–	exploitdb
exploitpack	NUUO NVRmini2 NVRsolo Crystal Devices NETGEAR ReadyNAS Surveillance Application - Multiple Vulnerabilities	5 Aug 201600:00	–	exploitpack
Metasploit	NUUO NVRmini 2 / NETGEAR ReadyNAS Surveillance Unauthenticated Remote Code Execution	4 Aug 201615:55	–	metasploit
Nuclei	NUUO NVR camera `debugging_center_utils_.php` - Command Execution	2 Jun 202610:14	–	nuclei

NVD

Node

netgear readynas_surveillanceMatch1.1.1

OR

netgear readynas_surveillanceMatch1.1.2

OR

netgear readynas_surveillanceMatch1.2.0.4

OR

netgear readynas_surveillanceMatch1.3.2.4

OR

netgear readynas_surveillanceMatch1.3.2.14

OR

netgear readynas_surveillanceMatch1.4.0

OR

netgear readynas_surveillanceMatch1.4.1

OR

netgear readynas_surveillanceMatch1.4.2

Node

nuuo nvrmini_2Match1.7.5

OR

nuuo nvrmini_2Match1.7.6

OR

nuuo nvrmini_2Match2.0.0

OR

nuuo nvrmini_2Match2.2.1

OR

nuuo nvrmini_2Match3.0.0

Node

nuuo nvrsoloMatch1.75

OR

nuuo nvrsoloMatch2.0.0

OR

nuuo nvrsoloMatch2.0.1

OR

nuuo nvrsoloMatch2.1.5

OR

nuuo nvrsoloMatch2.2.2

OR

nuuo nvrsoloMatch2.3

OR

nuuo nvrsoloMatch2.3.1.20

OR

nuuo nvrsoloMatch2.3.7.9

OR

nuuo nvrsoloMatch2.3.7.10

OR

nuuo nvrsoloMatch2.3.9.6

OR

nuuo nvrsoloMatch3.0.0

Source	Link
securityfocus	www.securityfocus.com/bid/92318
exploit-db	www.exploit-db.com/exploits/40200/
kb	www.kb.cert.org/vuls/id/856152

Parameter	Position	Path	Description	CWE
log	query param	__debugging_center_utils___.php	Unauthenticated remote code execution via log parameter in __debugging_center_utils___.php	CWE-20

06 May 2026 22:30Current

8.3High risk

Vulners AI Score8.3

CVSS 39.8

CVSS 210

EPSS0.89376

cve-2016-5674 remote code execution nuuo nvrmini 2 nuuo nvrsolo netgear readynas surveillance php security vulnerability nvd