NUUO NVRmini 2 / NETGEAR ReadyNAS Surveillance Default Configuration Load And Administrator Password Reset

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'NUUO NVRmini 2 / NETGEAR ReadyNAS Surveillance Default Configuration Load and Administrator Password Reset', 'Description' = %q The NVRmini 2...

CVE-2016-5676

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/nuuonvrminireset.rb 2025-02-06 03:13:42+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:48+00:00| seen|...

CVE-2016-5676

CVE-2016-5676 affects NUUO NVRmini 2 (versions 1.7.5–2.x), NVRsolo (1.7.5–2.x) and NETGEAR ReadyNAS Surveillance (1.1.1–1.4.1). A flaw in the CGI handler (cgi-bin/cgi_system) lets remote attackers reset the administrator password via a cmd=loaddefconfig action. Impact is reported as high (integri...