CVE-2016-5675

🗓️ 31 Aug 2016 15:00:00Reported by certccType

cve

cve🔗 web.nvd.nist.gov👁 79 Views🌐 WEB

NUUO NVRmini 2, NUUO NVRsolo, NUUO Crystal, NETGEAR ReadyNAS - Remote Code Execution CVE-2016-5675

Reporter	Title	Published	Views	Family All 15
0day.today	NUUO NVRmini2 / NVRsolo / Crystal Devices / Netgear ReadyNAS Surveillance Application - Multiple Vul	5 Aug 201600:00	–	zdt
Circl	CVE-2016-5675	29 May 201815:50	–	circl
CNVD	Arbitrary Code Execution Vulnerability in Multiple NUUO and NetGear Products	15 Aug 201600:00	–	cnvd
Check Point Advisories	Nuuo NVR PHP System Function Unauthenticated Remote Code Execution (CVE-2016-5675)	6 Oct 201600:00	–	checkpoint_advisories
Cvelist	CVE-2016-5675	31 Aug 201615:00	–	cvelist
Exploit DB	NUUO NVRmini2 / NVRsolo / Crystal Devices / NETGEAR ReadyNAS Surveillance Application - Multiple Vulnerabilities	5 Aug 201600:00	–	exploitdb
exploitpack	NUUO NVRmini2 NVRsolo Crystal Devices NETGEAR ReadyNAS Surveillance Application - Multiple Vulnerabilities	5 Aug 201600:00	–	exploitpack
Metasploit	NUUO NVRmini 2 / Crystal / NETGEAR ReadyNAS Surveillance Authenticated Remote Code Execution	4 Aug 201615:54	–	metasploit
NVD	CVE-2016-5675	31 Aug 201615:59	–	nvd
OpenVAS	NUUO NVRmini 2 <= 3.0.8 Multiple Vulnerabilities - Active Check	23 Aug 201600:00	–	openvas

NVD

Node

netgear readynas_surveillanceMatch1.1.1

OR

netgear readynas_surveillanceMatch1.1.2

OR

netgear readynas_surveillanceMatch1.2.0.4

OR

netgear readynas_surveillanceMatch1.3.2.4

OR

netgear readynas_surveillanceMatch1.3.2.14

OR

netgear readynas_surveillanceMatch1.4.0

OR

netgear readynas_surveillanceMatch1.4.1

OR

netgear readynas_surveillanceMatch1.4.2

Node

nuuo crystalMatch2.2.1

OR

nuuo crystalMatch3.0.0

OR

nuuo crystalMatch3.1.0

OR

nuuo crystalMatch3.2.0

Node

nuuo nvrsoloMatch1.0.0

OR

nuuo nvrsoloMatch1.0.1

OR

nuuo nvrsoloMatch1.1.0

OR

nuuo nvrsoloMatch1.1.0.117

OR

nuuo nvrsoloMatch1.1.1

OR

nuuo nvrsoloMatch1.1.2

OR

nuuo nvrsoloMatch1.2.0

OR

nuuo nvrsoloMatch1.3.0

OR

nuuo nvrsoloMatch1.75

OR

nuuo nvrsoloMatch2.0.0

OR

nuuo nvrsoloMatch2.0.1

OR

nuuo nvrsoloMatch2.1.5

OR

nuuo nvrsoloMatch2.2.2

OR

nuuo nvrsoloMatch2.3

OR

nuuo nvrsoloMatch2.3.1.20

OR

nuuo nvrsoloMatch2.3.7.9

OR

nuuo nvrsoloMatch2.3.7.10

OR

nuuo nvrsoloMatch2.3.9.6

OR

nuuo nvrsoloMatch3.0.0

Node

nuuo nvrmini_2Match1.7.5

OR

nuuo nvrmini_2Match1.7.6

OR

nuuo nvrmini_2Match2.0.0

OR

nuuo nvrmini_2Match2.2.1

OR

nuuo nvrmini_2Match3.0.0

Source	Link
securityfocus	www.securityfocus.com/bid/92318
exploit-db	www.exploit-db.com/exploits/40200/
kb	www.kb.cert.org/vuls/id/856152

Parameter	Position	Path	Description	CWE
user	request body	login.php	Authenticated login step required before exploitation; enables setting admin cookies for subsequent RCE via handle_daylightsaving.php	CWE-20
pass	request body	login.php	Authenticated login step required before exploitation; enables setting admin cookies for subsequent RCE via handle_daylightsaving.php	CWE-20
submit	request body	login.php	Authenticated login step required before exploitation; enables setting admin cookies for subsequent RCE via handle_daylightsaving.php	CWE-20
act	query param	handle_daylightsaving.php	Vulnerability allows remote code execution by injecting payload into NTPServer parameter during update action	CWE-20
NTPServer	query param	handle_daylightsaving.php	Vulnerability allows remote code execution by injecting payload into NTPServer parameter during update action	CWE-20

17 Jun 2026 00:49Current

8.3High risk

Vulners AI Score8.3

CVSS 39.8

CVSS 210

EPSS0.70877

nuuo nvrmini 2 nvrsolo crystal netgear readynas remote code execution cve-2016-5675 security vulnerability