Design/Logic Flaw

2016-08-3115:59:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.094 Low

EPSS

Percentile

94.8%

JSON

cgi-bin/cgi_system in NUUO NVRmini 2 1.7.5 through 2.x, NUUO NVRsolo 1.7.5 through 2.x, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to reset the administrator password via a cmd=loaddefconfig action.

CPENameOperatorVersion
readynas_surveillanceeq1.4.0
readynas_surveillanceeq1.1.1
readynas_surveillanceeq1.2.0.4
readynas_surveillanceeq1.4.2
readynas_surveillanceeq1.3.2.14
readynas_surveillanceeq1.4.1
readynas_surveillanceeq1.3.2.4
readynas_surveillanceeq1.1.2
nvrmini_2eq2.0.0
nvrmini_2eq1.7.5

Name	Operator	Version
readynas_surveillance	eq	1.4.0
readynas_surveillance	eq	1.1.1
readynas_surveillance	eq	1.2.0.4
readynas_surveillance	eq	1.4.2
readynas_surveillance	eq	1.3.2.14
readynas_surveillance	eq	1.4.1
readynas_surveillance	eq	1.3.2.4
readynas_surveillance	eq	1.1.2
nvrmini_2	eq	2.0.0
nvrmini_2	eq	1.7.5