Hardcoded credentials

2016-08-3115:59:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.7%

JSON

NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 have a hardcoded qwe23622260 password for the nuuoeng account, which allows remote attackers to obtain sensitive information via an nvr_status_.php request.

CPENameOperatorVersion
readynas_surveillanceeq1.4.0
readynas_surveillanceeq1.1.1
readynas_surveillanceeq1.2.0.4
readynas_surveillanceeq1.4.2
readynas_surveillanceeq1.3.2.14
readynas_surveillanceeq1.4.1
readynas_surveillanceeq1.3.2.4
readynas_surveillanceeq1.1.2
nvrmini_2eq2.0.0
nvrmini_2eq1.7.5

Name	Operator	Version
readynas_surveillance	eq	1.4.0
readynas_surveillance	eq	1.1.1
readynas_surveillance	eq	1.2.0.4
readynas_surveillance	eq	1.4.2
readynas_surveillance	eq	1.3.2.14
readynas_surveillance	eq	1.4.1
readynas_surveillance	eq	1.3.2.4
readynas_surveillance	eq	1.1.2
nvrmini_2	eq	2.0.0
nvrmini_2	eq	1.7.5